Permissions problems in windows 2003 server

saunaG
saunaG used Ask the Experts™
on
I have a small lan with an NT4 box that serves as the domain controller.  THe domain is called TUDHOPE
I added a PC running windows 2003 server and the computer name is server.  It is not part of the domain, it is just another computer on the network.
I added a bunch of users to the windows 2003 server box and have the usernames and passwords matching those of the TUDHOPE domain.
But when someone on the TUDHOPE domain tries to access the windows 2003 box over the network they arent able to access the resouces as I intened.  I have groups and users setup on the windows 2003 box but what seems to happen is the TUDHOPE domain users can see the shares on the windows 2003 box but cannot modify or add files even though those permissions are explictily allowed via group permissions.
What am i doing wrong?
Thanks
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®

Author

Commented:
seems i have to go into the sharing/security properties of the share and
add Share Permissions of 'Change' to the users/groups in question.
I thought the share permissions didnt matter - you just went and set the proper file
permissions - is this an incorrect assumption?

So for each share not only do i have to set the file permissions, i have to set the share permissions too???

Thanks
Allways set the share permission to everyone having full control.

That means that everyone on the network can connect to the share without any problems.

Allways decrease theese rigths with proper ntfs security permissions for the different groups you want:

Domain Admins = Full Control
Domain Groups = Modify or Read


Here are some urls about it:

Default Permissions for Shared Folders Is Read-Only Access for Everyone
http://support.microsoft.com/default.aspx?scid=kb;en-us;328065

Shared Folder Name Does Not Appear on Mapped Network Drive in Windows Explorer
http://support.microsoft.com/default.aspx?scid=kb;en-us;817861

Windows XP Security - The Big Joke
http://pubs.logicalexpressions.com/Pub0009/LPMArticle.asp?ID=173

Share Names With a "$" Character at the End Are Hidden
http://support.microsoft.com/default.aspx?scid=kb;en-us;90929

Understanding NTFS permissions:
http://www.windowsitlibrary.com/Content/592/1.html

Default NTFS Permissions in Windows 2000:
http://support.microsoft.com/?kbid=244600
%systemroot% = C:\WINNT

HOW TO: Restore the Default NTFS Permissions for Windows 2000
http://support.microsoft.com/default.aspx?scid=kb;en-us;266118

Troubleshooting File Management Issues if You Cannot Delete a File or a Folder on NTFS:
http://www.labmice.net/Windows2000/FileMgmt/troubleshooting.htm

Many Regards
Jorgen Malmgren
IT-Supervisor
Denmark

:o) Your brain is like a parachute. It works best when it's open

Author

Commented:
you say to:
Allways set the share permission to everyone having full control.
That means that everyone on the network can connect to the share without any problems.

lets say i have 2 shares for a users to save their documents:
user1 and user2
if they are both shared with full control share permissions for everyone, will user2 be able to just see that a user1 share exists or actually see the contents of this share (but not open actual files)  

i dont want user1 to see the contents of the user2 folder.

will this happen using your instrucitons?
Learn SQL Server Core 2016

This course will introduce you to SQL Server Core 2016, as well as teach you about SSMS, data tools, installation, server configuration, using Management Studio, and writing and executing queries.

You must both use share and ntfs permissions:

ShareForUser1:
share: Everyone - Full control
ntfs: Domain admins - Full Control
ntfs: user1 - write

ShareForUser2:
share: Everyone - Full control
ntfs: Domain admins - Full Control
ntfs: user2 - write

ShareForAllUsers:
share: Everyone - Full control
ntfs: Domain admins - Full Control
ntfs: Domains Users - write

Author

Commented:
thanks
:o) Glad I could help you - thank you for the points

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial