T
TimInDublin
Hello,
I have recently deployed a single Server 2016 Standard into a small company, where the data and users are rigidly split into 4 silos (security groups), with neither having any overlapping access to folders/shares. Because we are in Europe, I have had to designate one local user as a data protection officer due to GDPR, which should have access to everything. This user is a member of the Administrators and Domain Admins group, and can access everything at a folder level on the server, but is getting access denied when trying to access the folders by share name on a client machine. The share permissions for each of the 4 shares are set to the equivalent top level group, plus full control by Administrators, and the NTFS permissions are set similarly, in addition to the default out of the box folder permissions (system, owner, etc).
I feel like I am missing something simple here, and I could easily make this go away by granting explicit permissions to the user, but I would like to understand where I am going wrong.
Many thanks,
Tim
Tim in Dublin
Continue reading...
I have recently deployed a single Server 2016 Standard into a small company, where the data and users are rigidly split into 4 silos (security groups), with neither having any overlapping access to folders/shares. Because we are in Europe, I have had to designate one local user as a data protection officer due to GDPR, which should have access to everything. This user is a member of the Administrators and Domain Admins group, and can access everything at a folder level on the server, but is getting access denied when trying to access the folders by share name on a client machine. The share permissions for each of the 4 shares are set to the equivalent top level group, plus full control by Administrators, and the NTFS permissions are set similarly, in addition to the default out of the box folder permissions (system, owner, etc).
I feel like I am missing something simple here, and I could easily make this go away by granting explicit permissions to the user, but I would like to understand where I am going wrong.
Many thanks,
Tim
Tim in Dublin
Continue reading...