You'd also be best putting those users into a group and assigning permissions on that folder to the group rather than the 4 users individually.
Main Topics
Browse All Topics
A Small business network has a shared network drive that all users have access to. The CEO has requested That a folder be created named "Folder1" and only User1, User2, User3 and User4 should have access, but these users should have access to all files created in "Folder1" by all of the users with access. I have restricted access to the "Folder1" and only allowed the above users, however when User 1 creates a file, only user one has access. I need for all files to inherite the permissions of the "Folder1" no matter which user created them. Can Someone help me?
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
All users have modify rights, not full controll which should not really matter. Since this folder is on a shared network drive that all users within the orginization have access to, I had to uncheck the inherite permissions from parent object or folder in order to remove the "domain users" group which is given to the folder by default when it is created so everyone would not have access to it. So maybe there is some other check box that I left out. I would just put them in a group and give access to the group but this is going to be common practice from what I understand and I don't want my AD all clustered up with alot of groups saying "folder1 users" Folder2 users" For only a few users in each folder. You know what I mean?
OK I see what you're saying. As long as the access to this folder is going to remain pretty static you can stick with individuals but it does get harder to troubleshoot on an individual basis.
I suggest you have a look at one of the files in this folder that has the problem and see what the permissions on it are to find why there are problems. If you click on Advanced you can look into the Effective Permissions to see exactly what permissions are applied for one of the users who is unable to open it but ought to be able to.
You have to un-checked inherit to explicitly specify indivituals but on that same screen with the inherit is a "apply new permissions to sub folders and files". Sometimes that needs to be done if you change permissions with files already in that folder.
Your really haven't told us yet what errors the users get when they try and access the files. You might try experimenting and giving them more then modify. I believe the defaults are read, execute and something else :)
When rt click on a file inside the folder and go to properties (security tab) no one shows up in the list, it is blank. then when I click advanced the "inherit from parent permissions is checked but greyed out" probably because I'm not the file owner but that's no big deal. Anyway, I need for it to all be automatic so when one user creates a file the other users can access it so I don't have to change the permissions on each file after they are created.
You shouldn't have to. Start with the folder security once again:
You have to un-checked inherit to explicitly specify indivituals but on that same screen with the inherit is a "apply new permissions to sub folders and files". Sometimes that needs to be done if you change permissions with files already in that folder.
Key is "apply new permissions to sub folders and files".
On the folder the inherite from parent the permissions is unchecked. Just below that the "replace permission entries on all child objects with entries shown here that apply to child objects is also unchecked. when I try to check it it says "This will remove explicitly defined permissions on all child objects on and enable propogation of inheritable permissions to those child objects. Only inheritable permissions propigate from the (folder name) will take affect. Do you wish to continue? I click yes and the box becomes unchecked as if it will not allow me to do that. Is this the box you are refering to jimbecher?
Using the "Replace Permission Entries On All Child Objects" checkbox forces the permissions you have defined on a folder to be put onto the *existing* objects below that folder there and then. After that point, new files created in that folder will simply get those same permissions through inheritance.
Now that you've pushed those permissions onto the existing files, re-check the permission on them. I presume the parent folder gives permissions for YOU too so you can actually look? If not, you will get that blank security page like before.
I'm in the administrators group that has access, but I tried just adding myself and giving me full permissons to the folder. When I try to open a file in the folder it still tells me I do not have access. It's just like I described above. The files are just not inheriting the permissions of the parent folder for some reason...
and when you look at the security on that folder in advanced view it shows you having fill permissions to that folder and any files and sub folder to that folder?
Type Name Permission Inherited From Apply To
Allow CJ27 Full Control <not inherited> This folder, sub folders and files
??????
yes this is exaclty right. And the folder is on the root of a shared network drive that (domain users) which is everyone in our orginization has modify rights. Only a couple of folders are regulated and this is one of them. When a folder is created it inherits the domain users, and I must remove that group and allow only specified users to this folder.
Two questions: 1) You have question marks up above under the type. Does this mean the "Type" does not say "Allow" as in the above example? 2) You keep specifying "Modify". By default the rights are Read&Execute, List Folder Contents and Read. Have you explicitly removed those rights and given on Modify?
Do you mean the network shared drive that the folder is on the root of? All domain users have modify rights? I'm kind of hesitant about messing with those permissions because there are a few confidental folders and files on there that If the wrong people accidently get access too I could be in alot of trouble.
Yes. Right click in the folder that is shared and go to Sharing then Permissions. Make sure these four users are included in the Share Permission and have at least the permissions you want to give them on the Sub Folder. You don't have to modify anything if you are uneasy about it but those four users have to have AT LEAST the permissions you want them to have on the sub folder.
The other thing you could check (on the folder in question) is go to the Sharing and Security => Advanced => Effective Permissions and "Select" the individuals that should have rights to this folder. Look at what Effective Permissions they have. It shouldn't come as a suprise but it is another confirmation that they don't have the right's needed ...
I have verifed in effective permissions that the users do not have any rights to the folder. The parent folder does have the same permissions as I would like the subfolders and files to inherite.
Update. currently there is only one file in this folder that was created by a user. I created a folder and a file inside this same parent folder and everything was inherited fine. Tommorrow I will get other users to create a file in this folder to test it further, it could just be this one file(or the 1 user that created it). I will test tommorrow and update results.
Business Accounts
Answer for Membership
by: jimbecherPosted on 2009-08-28 at 14:31:22ID: 25211704
Something is missing. If you truely gave all four users full access to that folder then is shouldn't make any difference who created the file, all four users should have access to it. If you go back in to Windows Explorer, right click on that folder, select properties then security. Click on the advanced tab and make sure all four users show up and that the "Apply To" says "This Foleer, subfolders and files" and that the permission is full.
Does this senario hold true is User2 creates a file? 1,3 and 4 can't access it?