Advanced Security for Macintosh Accessible Share

From: Jeff Tomasek (systems_at_dominionpost.com)
Date: 03/05/04 

Date: Fri, 5 Mar 2004 08:06:07 -0800

  My company just purchased a new Dell Power Edge 2600 server running Windows 2k Server. This server is going to be replacing an old NT server, that was mainly used as a print server and a file server for both Macintosh and PC computers. On this new server, I want to tighten up the security on it, and the biggest problem that I am having, is with Macintosh computers.
  I have set up user groups for the majority of our users that are going to be accessing these shares. I currently have the PC security set EXACTLY the way that I want it, it works great. The problem that im having, is the fact that I want the Mac users to be able to have the exact same security set for these shares. Which again seems to not be a problem, considering when you create the share and set the securities up for it, it duplicates the information for both the PC share, and the Mac share. The catch is, when you try to access the share through a mac, you basically only have list and read security. You cannot write files, you cannot open files, you cannot delete files, you cannot create folders, you cannot delete folders. Here is how I have everything set up.
  I need to allow users to view / edit / create / delete "ALL FILES" on both PC and Macs. I also, need for them to NOT be able to "CREATE OR DELETE FOLDERS" for both PC and Mac users. I have this working flawlessly with all PC users by setting the following security:
Advanced Permissions:
ALLOW: (everthing Checked to allow applying onto "FILES ONLY"
ALLOW: (everything Checked EXCEPT Create Folders / Append Data, Delete Subfolders and Files, Delete applying this to "FOLDERS AND SUBFOLDERS"

These are the ONLY permissions that I have set for this share. I also have Inherit permissions from parent turned OFF, so it is not inheriting permissions from anywhere except for what I have explicitly set here. If I access the share via a PC, everything works correctly. Windows users can do anything they wish with any files listed or put any files they wish there, but cannot do anything with folders, nor can they create folders. Have I missed something with setting this up, that is not allowing the mac users to access this properly? Any help, tips or tricks would be very much appreciated.

Jeff

Relevant Pages

  • Re: RFI - Moving files between folders in doc libraries - any improvements in this behavior?
    ... > and folders (subfolders) to organize content. ... SharePoint is a new creation. ... users did not have document libraries into which they can upload ...
    (microsoft.public.sharepoint.portalserver)
  • Re: Deleting Windows Temp Files
    ... I do want to remove the sub folders. ... "Jeff Cochran" wrote in message ... >>(Unless you want to count the number of files and subfolders deleted.) ... >>Deleting first-level subfolders via "FSO.DeleteFolder" deletes their ...
    (microsoft.public.scripting.vbscript)
  • Re: folderLastAccessed script
    ... It will consider nothing other than the subfolders of ... I would like to get the last time all the folders were last accessed. ... Dim WshShell ... Dim fs, f, s, strfolder ...
    (microsoft.public.scripting.vbscript)
  • Re: Making folders....
    ... Just the subfolders on the root level. ... You see the folders for each country are located as a subfolder ... The second script is a version that will create new folders only at ... If Not oFSO.FolderExists(sFolder & "\" & sNewFolder) Then ...
    (microsoft.public.windowsxp.general)
  • Re: Exchange/Outlook 2003 mailbox sizes - best practises
    ... the data is important enough to keep, it belongs on the server. ... Well he stores practically everything that he does into his mailbox ... Don't let users create subfolders under built-in folders. ...
    (microsoft.public.windows.server.sbs)