| Author |
Message |
Scott
Guest
|
 Posted:
Wed Sep 28, 2005 5:55 am Post subject:
Permission Issue |
|
|
Hi all,
I have a weird problem with a freshly installed W2k server. It is
not running as a domain controller, and is just a member of a workgroup. I
have a sub-folder on the hard-drive which I am putting user folders in for
network clients to store files on. The problem is as follows:
Lets say there are users A,B and C.
I have created three folders - c:\data\A
c:\data\B
c:\data\C
On each of the three folders, the Share, and security permissions are set to
'Full Control', for both 'Administrator' and the applicable User.
With that said, I would expect 'Administrator' to have full access to all 3
folders, and each user to only have access to their relevant folder.
Unfortunately, they can ALL access ALL 3 of the folders (shares) across the
network.
They are NOT members of the Administrator group, only the 'Users' group.
The parent data folder I have set to 'Full Control' for both 'Administrator'
and the 'Users' group, and unticked 'Inherit permissions' etc.
What am I doing wrong here???
Any help would be greatly appreciated
Scott |
|
| Back to top |
|
 |
Steven L Umbach
Guest
|
| Posted:
Wed Sep 28, 2005 8:19 am Post subject:
Re: Permission Issue |
|
|
First off check the ntfs permissions on the root/drive folder to make sure
that the everyone group does not have full control. If it does change it to
read/list/execute. For the parent data folder give users group read/list
permissions and then give each user full control for their folder to see if
that helps and verify that only administrator and the user account is
included in the ntfs permissions and also check the advanced page for
properties/security to check special permissions. When you set permissions
on the main security page of a folder that will set security for folder,
subfolder, and files as seen in the advanced page where you cans see or edit
permissions for a user/group and select the apply onto box. --- Steve
"Scott" <someone@microsoft.com> wrote in message
news:OrS2Id8wFHA.2792@tk2msftngp13.phx.gbl...
| Quote: | Hi all,
I have a weird problem with a freshly installed W2k server. It is
not running as a domain controller, and is just a member of a workgroup. I
have a sub-folder on the hard-drive which I am putting user folders in for
network clients to store files on. The problem is as follows:
Lets say there are users A,B and C.
I have created three folders - c:\data\A
c:\data\B
c:\data\C
On each of the three folders, the Share, and security permissions are set
to 'Full Control', for both 'Administrator' and the applicable User.
With that said, I would expect 'Administrator' to have full access to all
3 folders, and each user to only have access to their relevant folder.
Unfortunately, they can ALL access ALL 3 of the folders (shares) across
the network.
They are NOT members of the Administrator group, only the 'Users' group.
The parent data folder I have set to 'Full Control' for both
'Administrator' and the 'Users' group, and unticked 'Inherit permissions'
etc.
What am I doing wrong here???
Any help would be greatly appreciated
Scott
|
|
|
| Back to top |
|
|
Roger Abell [MVP]
Guest
|
| Posted:
Sun Oct 02, 2005 4:50 pm Post subject:
Re: Permission Issue |
|
|
On the parent folder, when you unticked "Inherit permissions" you
are stating that inheritable settings should not flow down onto that
parent folder from above. That does not control the flow onto the
child folders. You would need to either that selection on each of
the child folders, or, at the parent folder use the advanced dialog's
Edit button to change the grant to Users from applying to This folder,
subfolders, and Files to only This folder and files.
--
Roger Abell
Microsoft MVP (Windows Server : Security)
MCDBA, MCSE W2k3+W2k+Nt4
"Scott" <someone@microsoft.com> wrote in message
news:OrS2Id8wFHA.2792@tk2msftngp13.phx.gbl...
| Quote: | Hi all,
I have a weird problem with a freshly installed W2k server. It is
not running as a domain controller, and is just a member of a workgroup. I
have a sub-folder on the hard-drive which I am putting user folders in for
network clients to store files on. The problem is as follows:
Lets say there are users A,B and C.
I have created three folders - c:\data\A
c:\data\B
c:\data\C
On each of the three folders, the Share, and security permissions are set
to 'Full Control', for both 'Administrator' and the applicable User.
With that said, I would expect 'Administrator' to have full access to all
3 folders, and each user to only have access to their relevant folder.
Unfortunately, they can ALL access ALL 3 of the folders (shares) across
the network.
They are NOT members of the Administrator group, only the 'Users' group.
The parent data folder I have set to 'Full Control' for both
'Administrator' and the 'Users' group, and unticked 'Inherit permissions'
etc.
What am I doing wrong here???
Any help would be greatly appreciated
Scott
|
|
|
| Back to top |
|
|
|
|
|
|
FAQ
Memberlist
Register
Profile
Log in to check your private messages
Log in