Permission problems on folders created by Mac users on Win2k Server

From: Chris Moore (noc@encoremediagroup.com)
Date: 09/03/02 

From: "Chris Moore" <noc@encoremediagroup.com>
Date: Tue, 3 Sep 2002 08:11:03 -0700

I have a small Mac lab at my workplace that accesses/uses folders on some of
my Win2k server machines. From time to time the Mac users create folders.
Once they create these folder no one else can access them.
I've set the "root" folder with the following NTFS permissions (and for
inheritance to migrate to subcontainer/child objects):
-domain admins, full control
-domain users, read/write/delete/modify (everything except full control)
-system, full control
When they create a new folder the permissions on the new folder are:
-domain admins, full control
-domain user, no permission assigned
-everyone, no permissions
-system, read/write/delete/modify
-"creator, full control
*Note the ownership is extend to the folder creator

My only workaround is to give the everyone group full control on NTFS
permission, which then alleviates the problem. However, having the everyone
group have full control is not desireable. We are currently running in a
mixed environment with the domain controllers running Windows NT 4.0. Does
anyone know if there is an outstanding issue or of a way to establish
permissions without having to use the everyone group on the NTFS
permissions? Thanks in advance for the help.
-Chris Moore

Below is a line similar to my problem if it helps anyone (it only answered
half my question):

Hi
I have a bizzare problem and would appreciate the help :-)

I have a share (PC/MAC) that inherits permissions from the parent directory.
thus:
UserX modify
UserY modify
GroupXY modify
Administrators Full control

when UserX creates a folder through appleshare the following permission
chage take effect

UserX modify
UserY modify
domain users read
administrators full control

If accessed through the PC no permission change will happen, as it will
inherit the permission from the father
directory. where does the MAC get this permission set from???. Why does it
create an entry for the default domain users???. why does it not inherit
the permissions?.

Reply:
I opened a case with Microsoft about this. I was basically told that is the
way it will work with SFM due to the fact that NTFS and Mac file rights do
not translate to eachother. There is a pre SP3 patch they will send you
that
address issues with SFM inheritance (it really doesn't do anything for the
explicit assignment of rights problem) Since they consider this to be a bug
they will refund your payment for the case.

Relevant Pages