Re: creating shares that are actually writeable

From: Miha Pihler [MVP] (mihap-news_at_atlantis.si)
Date: 07/26/05

  • Next message: rbaddanki_at_gmail.com: "Re: Custom COMPUTER certificate templates"
    Date: Tue, 26 Jul 2005 18:07:53 +0200
    
    

    Hi,

    Better then using Everyone is to specify either "Authenticated Users" or
    "Domain Users" groups. Even better would be another more specific group
    (e.g. "All Full Time Employees" group if you create it) -- but that depends
    who needs to access the share.

    Beside permissions on the share itself, users will also need NTFS
    permissions on this folder (Write Permissions). If you only have Read
    permission on NTFS and Write on Share -- users will still only be able to
    Read from this share!

    -- 
    Mike
    Microsoft MVP - Windows Security
    "Brendon" <brendon@nospam-itology.net> wrote in message 
    news:%23WEgqXfkFHA.3968@tk2msftngp13.phx.gbl...
    > Your users won't be Domain Admins, they are normal users. So give either 
    > Everyone or Authenticated Users Modify rights at the share-level and the 
    > NTFS level.
    >
    > When creating a new share by default Windows 2000 used to give Everyone 
    > Full Control at share-level. Windows 2003 gives Everyone Read Only at 
    > share-level.
    >
    > "Andrew Jones" <ajones@kvmhc.org> wrote in message 
    > news:eb569$42e65238$d8ccc91a$13752@LIGHTSHIP.NET...
    >> This has always been simple, but on my last two server 2003 servers that 
    >> I've built I can't seem to create a share that is actually writeable to 
    >> users.  There must be a setting I'm missing and I've been searching high 
    >> and low for it and can't find it.  Basically I create a folder on the 
    >> server and then right click and share.  For testing purposes I am just 
    >> trying to make it writeable by a domain admin group member, but its 
    >> proving to be a difficult task.  The share and folder both have security 
    >> settings that give domain admins full control.  IDEAS???
    >>
    >> Thanks,
    >>
    >> AJ
    >>
    >
    > 
    

  • Next message: rbaddanki_at_gmail.com: "Re: Custom COMPUTER certificate templates"

    Relevant Pages

    • Re: Active Directory Printers----ARGH!
      ... from the server. ... > Not a one of them is usable from my client machines. ... > I've checked the share permissions on the printer definitions and they are ... wide open to all authenticated users. ...
      (microsoft.public.windows.server.active_directory)
    • Re: w2k3 sp1 - now "unable to open service control manager databas
      ... I found another thread under Windows Server 2003 that helped, ... service control manager database did change with SP1. ... Comparing the 2 show that in Windows 2003 RTM version, Authenticated users ... permissions were added to scmanager for Authenticated Users with the ...
      (microsoft.public.win2000.security)
    • Re: Please help - Servers objects gone
      ... I was able to change back the permissions for Authenticated Users, ... I selected View->Show Services Nodes and ... > server kind of disappear from the windowpane, so I collapsed the tree and I ...
      (microsoft.public.exchange.setup)
    • RE: Windows 2003 Server - Everyone Group
      ... this folder only accessable by the users in the "special" group. ... Configure User and Group Access on an Intranet in Windows Server ... NTFS files system permissions control ... group that you want to set permissions for, click Check Names to verify the ...
      (microsoft.public.win2000.networking)
    • Fail DBD::Mysql 4.003 installation
      ... This test requires a running server and write permissions. ... permissions, then retry. ... Failed 9/9 tests, 0.00% okay ...
      (perl.dbi.users)