help with setting up File Access Rights in Windows 2003

From: iceghost (msm0001_at_hotmail.com)
Date: 04/05/05 

Date: 5 Apr 2005 11:23:01 -0700

I am new to Windows 2003 Server and I am trying to set up a simple
directory structure to allow a small workgroup to access data based on
their group. I come from a Novell background and I can do all the
following very simply in Novell - but I need some help from you MS
Gurus with this one please.

I am setting up the following directory structure

C:\
  Data
     Accounts
     Sales
     Marketing

etc

I need to allow access to Accounts to the Accounts Team and so on.
I set up a security group called Accts and pulled the 2 accts people
into it.
I set up Data as a shared resource on the server.
I then went to the c:\Data\Accounts Folder and removed all inherited
rights and assigned Full rights to the administrator and the Accts
Group.

BUT with this configuration, H: (mapped to the Accounts Share) from a
PC logged in with an Accts Group account cannot access the folders.
(Access Denied)

If I let the rights from C:\Data\Accounts propagate DOWNwards, it
changes nothing.

If however I allow inherited rights from above, everything works. But
it also means ALL non Accts group users also can see everything in the
folder.

I asked a few colleagues and we didn't manage to work it out. What's
the answer anyone please... Or is the answer not to use W2003 in this
way? Shall I create several shares and assign rights to shares?

The only way I got this to work is if I explicitly set the rights by
username. But I don't want to do this for obvious reasons.

Thanks in advance.

Saeed

ì

Relevant Pages

  • Re: help with setting up File Access Rights in Windows 2003
    ... > I need to allow access to Accounts to the Accounts Team and so on. ... > I set up a security group called Accts and pulled the 2 accts people ... > rights and assigned Full rights to the administrator and the Accts ... > If however I allow inherited rights from above, ...
    (microsoft.public.win2000.security)
  • Re: Exchange 5.5 to 2003 migration questions
    ... That usually means you do not have the correct accounts listed on the ... So if you brought up AD Users and Computers from the Exchange server you ... This posting is provided "AS IS" with no warranties, and confers no rights. ...
    (microsoft.public.exchange.admin)
  • RE: Permissions problem
    ... Please try to add the new Technician account to the following accounts. ... This posting is provided "AS IS" with no warranties, and confers no rights. ... >Bob Qin ... >Microsoft Online Partner Support ...
    (microsoft.public.windows.server.migration)
  • Re: Security Additions Disappearing
    ... Are the delegate accounts in AD? ... There is a known case where permissions get reset. ... This posting is provided "AS IS" with no warranties, and confers no rights. ... this Support account is only a member of Domain ...
    (microsoft.public.exchange2000.admin)
  • AD Design Help..needed..
    ... DC's etc no accounts would be created in this root/domain, ... Are there any limits on how many resources an OU can hold? ... we are going to use delegation to allow rights.. ... AD Structure MAC ...
    (microsoft.public.win2000.active_directory)