E
Edwin
Hi there,
I am trying to create folder with permissions, My normal routine when
setting up a new share is to.
1)Share the folder, Then access the share permissions, Then add the
authenticated users group and grant that group full control. Then I’ll remove
the everyone group.
2)Then access the NTFS permissions and grant “xzy†groups the different
levels of access read/list, full control, whatever. Accessing the share from
Vista and XP no problems.
Now the issue I’m having is, I’m trying to be more “granular†with the Share
permissions and not use the everyone or authenticated user groups for the
share permission and want to use “xyz†groups for share and NTFS permissions.
The step I take are as follows.
1)Share the folder, Then access the share permissions, Then add the “xyzâ€
users group and grant that group full control. Then I’ll remove the everyone
group, “xyz†group is the only group at the share level.
2)Then access the NTFS permissions and grant “xzy†groups the different
levels of access read/list, full control, whatever. Accessing the share from
my XP pc I have no problems,
BUT when I try accessing the share from my vista pc I’m getting a deny, you
don’t have permission.
I hope I made sense. I would appreciate any help anyone can give me.
Thanks in advance
Here's a simplified version of my setup (running on Windows 2003 Server):
root_folder
"root_folder" is shared, with full control given to Everyone.
Security
permissions on the folder itself are full control for Administrators,
Creator/Owner, and Users (folder, subfolders, and files). Both "completed"
and "working" are set to inherit from "root_folder". In addition, "completed"
has an extra permission, set to deny everything except read access to Users.
What I find is that, this deny permission also applies to the Administrator
account, which is in no way a member of the Users group.
I want to be able to move any folder from "working" into "completed"
(regardless of who the folder owner/creator is), and by doing so,
automatically make the folder read-only to members of the Users group. From
what I know about NTFS permissions, this basically forces me to use explicit
Deny permissions. If I simply remove the Users group from the permission
entries of "completed", then any folder created by a member of the Users
group will still be under full control of that user, even after being moved
to "completed". I also do not want to re-apply all child permissions every
time I move a folder into "completed".
I hope I made sense. I would appreciate any help anyone can give me.
Thanks in advance.
Edwin
I am trying to create folder with permissions, My normal routine when
setting up a new share is to.
1)Share the folder, Then access the share permissions, Then add the
authenticated users group and grant that group full control. Then I’ll remove
the everyone group.
2)Then access the NTFS permissions and grant “xzy†groups the different
levels of access read/list, full control, whatever. Accessing the share from
Vista and XP no problems.
Now the issue I’m having is, I’m trying to be more “granular†with the Share
permissions and not use the everyone or authenticated user groups for the
share permission and want to use “xyz†groups for share and NTFS permissions.
The step I take are as follows.
1)Share the folder, Then access the share permissions, Then add the “xyzâ€
users group and grant that group full control. Then I’ll remove the everyone
group, “xyz†group is the only group at the share level.
2)Then access the NTFS permissions and grant “xzy†groups the different
levels of access read/list, full control, whatever. Accessing the share from
my XP pc I have no problems,
BUT when I try accessing the share from my vista pc I’m getting a deny, you
don’t have permission.
I hope I made sense. I would appreciate any help anyone can give me.
Thanks in advance
Here's a simplified version of my setup (running on Windows 2003 Server):
root_folder
"root_folder" is shared, with full control given to Everyone.
Security
permissions on the folder itself are full control for Administrators,
Creator/Owner, and Users (folder, subfolders, and files). Both "completed"
and "working" are set to inherit from "root_folder". In addition, "completed"
has an extra permission, set to deny everything except read access to Users.
What I find is that, this deny permission also applies to the Administrator
account, which is in no way a member of the Users group.
I want to be able to move any folder from "working" into "completed"
(regardless of who the folder owner/creator is), and by doing so,
automatically make the folder read-only to members of the Users group. From
what I know about NTFS permissions, this basically forces me to use explicit
Deny permissions. If I simply remove the Users group from the permission
entries of "completed", then any folder created by a member of the Users
group will still be under full control of that user, even after being moved
to "completed". I also do not want to re-apply all child permissions every
time I move a folder into "completed".
I hope I made sense. I would appreciate any help anyone can give me.
Thanks in advance.
Edwin