On WS2003, we have a hdd N: and on it folder N:\students, which is shared as '<SERVER>\\students'. There is a group called 'students' in Active Directory. I'm trying to remove 'students' group from the system, using 'Domain Users' as student resources can be accessed by any authenticated domain user.
When I look at security on N:\students, it shows group 'students' with the 'Special Permissions - Allow' box greyed out and checked.
When I select group 'students' in the Group or user names list and click Remove, I get this:
You cannot remove "students (<DOMAIN>\students)" because this object is inheriting permissions from its parent. To remove "students (<DOMAIN>\students)," you must prevent this object from inheriting permissions. Turn off the option for inheriting permissions, and then try removing "students (<DOMAIN>\students)" again.
Perhaps I should do just what the message says, but that will clobber lots of other useful inherited permissions--and if I turn inheritance back on, I expect that the 'student' group's inherited permissions will just come back.
Meanwhile, under Advanced Security Settings / Permissions, there is a permission entry:
Allow students (...) Full Control Inherited from N:\, Apply to This folder only
BUT--and this is where I get lost--when I go up in the file explorer to My Computer, select Local Disk (N:), and look at Security, there's not a trace of the group 'students' to be seen.
So it seems that N:\students is inheriting a permission from N:\ that isn't in fact on N:\.
What am I missing here?
Incidentally, I have one other case like this a bit further down inside the N:\students folder tree, where a folder has inherited permissions for username 'student9', but the parent folder knows nothing about that username.
Start Free Trial
