Re: Share permissions conflicting with NTFS permissions



This is working as expected. When Share permissions and NTFS file
permissions are different, you only get the most restrictive of the two. In
your example, people would only be able to Read at most when accessing those
files through the network. Because NTFS file permissions are so much more
granular than Share permissions, most people usually assign that share Full
Control [or the highest level of permissions required across the network] to
Everyone or better yet to Authenticated Users, and then scale back the
permissions granularly using NTFS file and folder permissions.

"Greg" <Greg@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:4FBB7576-559A-4169-90F8-DB3C6EAEF57D@xxxxxxxxxxxxxxxx
I have a Share with the Domain Users group assigned Read access. In the
subfolders I have individual user accounts assigned with Various NTFS File
Permissions= Change, Write, even Full Control. None of these users can do
anything in the subfolders unless I go back to the Share Folder
Permissions,
and grant Change, or Full Control. What am I overlooking here? This is on
Windows 2003


.



Relevant Pages

  • Re: Active Directory authentication / authorisation
    ... Programmatically Set NTFS File System Folder Permissions ... Use ADsSecurity.dll to Remotely Add Local Account ACEs to an NTFS File ... Tony Toews, Microsoft Access MVP ...
    (comp.databases.ms-access)
  • Re: Access 2003 and Active Directory
    ... Programmatically Set NTFS File System Folder Permissions ... How To Use ADSI to Set Automatic Inheritance of File/Folder ... Tony Toews, Microsoft Access MVP ...
    (microsoft.public.access.modulesdaovba)
  • Re: User Rights at Client Seem to Vary
    ... > Herb thanks for the educating reply! ... Or just first VIEWING the permissions and perhaps ... Also, as a Novell guy, notice that SHARE permissions and ... NTFS FILE permissions are distinct -- they interact when a user ...
    (microsoft.public.windows.server.active_directory)
  • Re: NTFS + Impersonation + Asp.Net
    ... permissions because you still have to give permissions to ... I thought since I'm using impersonation and that the ... that user account. ... as a test I set NTFS file permisions to refuse ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • NTFS file auditing settings
    ... using Windows 2000 Domain Group Policy. ... permissions blank when I do this, it removes all permissions from the root ... What I would like is a way to roll out NTFS file auditing settings without ... Or maybe I'm doing something wrong with Group Policy. ...
    (microsoft.public.win2000.security)