I have a new Win2000 server system at my company. I am a system administrator, and have configured the Win2K machine as a domain controller.
I want to setup a shared user file area like this:
..etc., with the top level shared for network access.
I want to set permissions like this:
- Top folder & entire sub-tree - admins have full control access.
- Domain users & guests have read & execute, list contents, and read access for top level and sub-tree.
- Specific users have full control access only to the sub-folder assigned to them.
I tried to do this by setting myself up a user account. I tested the security settings; when logged in to the server itself (where the share is located) as a user, the security settings work as expected - I can have my way with the folder set up for the user I logged in as, but I can only view the contents of the other sub-folders under the top level share.
When I log in from my workstation (a Windows 2000 Professional machine), I can access the share, but I can only read and list folder contents, even for the folder that the user I logged in as was assigned full control access to.
Why would it work locally but not remotely? Is this a policy issue? Is this an inherited permissions issue? Is something to do with logging in from my workstation?