Windows 2003 - Share Permissions & Security Permissions

[Guest]

Using windows Server 2003 as a file server. I have a share called Public, within Public we have various sub-folders. I'm experiencing issues with permissions ( Share and Security permissions) . The objective to have the users access the share over the network, and only certain users should have access to some of the sub-folders

We had the same share and permissions configured on another server (NT 4.0) and needed to copy/move the share to the Windows 2003 file server. We copied the folder over to the new server and manually re-configured the Share and Security Permissions.


If I apply Read Share permissions for Everyone at the Top Level ( Public) and then apply Change for a particular sub-folder using a security group, and remove "everyone" from the sub-folder, The members of the security group cannot write to the sub-folder unless I give them Change Permissions from the Top-Level as well. Doing this also gives the users in the security group change permissions for all of the sub-folders in the Public folder. ( we do not what this to happen)

How accomplish applying change permissions to the sub-folder without giving the security group premisson to change files in all of the subfolders within Public. I've tried removing the check mark from "allow inheritable permissions from parent", and add the security group and still no luck

I noticed that I also have to set both Share permissions and Security Permissions for the Share, if I remove one or the other , the users cannot access the folder they've been granted permission to.

 

[Steven Umbach]

Give the users group read only permissions to the top level share and then
create a group with members that need change permissions to the share and give
just that group change permissions to the share. You may also need to explicitly
define permissions to the subfolders for ntfs permission to allow only the
authorized users.group to have the necessary permissions. Keep in mind that for
a network users their effective permissions to network shares will be the most
restrictive of the share or ntfs permissions. --- Steve

Using windows Server 2003 as a file server. I have a share called Public,

within Public we have various sub-folders. I'm experiencing issues with
permissions ( Share and Security permissions) . The objective to have the
users access the share over the network, and only certain users should have
access to some of the sub-folders.

We had the same share and permissions configured on another server (NT 4.0)

and needed to copy/move the share to the Windows 2003 file server. We copied
the folder over to the new server and manually re-configured the Share and
Security Permissions.

If I apply Read Share permissions for Everyone at the Top Level ( Public) and

then apply Change for a particular sub-folder using a security group, and remove
"everyone" from the sub-folder, The members of the security group cannot write
to the sub-folder unless I give them Change Permissions from the Top-Level as
well. Doing this also gives the users in the security group change permissions
for all of the sub-folders in the Public folder. ( we do not what this to
happen).

How accomplish applying change permissions to the sub-folder without giving

the security group premisson to change files in all of the subfolders within
Public. I've tried removing the check mark from "allow inheritable permissions
from parent", and add the security group and still no luck.

I noticed that I also have to set both Share permissions and Security

Permissions for the Share, if I remove one or the other , the users cannot
access the folder they've been granted permission to.