Windows 2000 Permissions

Hi Experts I have a huge problem...i have a windows 2000 server....i have s folder called  Vol2 that is shared....under security permissions there is a "everyone " group with full access to it...all my users can see that share fine.... the share has many subfolders in it...and  if a user creates a file  then other users cannot access that file .....the users that created that file has to give gim permissions to that file so that he can access it.......is there a way to make it so that everytime a user creates a file in that shared  folder on the windows 2000 server be accessible by any other user with out having the creator of the file have to give gim permissions to it??? thanks experts!! ..
LVL 1
James HilloyaAsked:
Who is Participating?
 
Fatal_ExceptionConnect With a Mentor Systems EngineerCommented:
The Users group contains ONLY authenticated users in the Domain.  The Everyone group includes everyone that could possibly get onto your network.  For instance, if I was able to hack past your firewall, and you had the Everyone group included in your shares, I could access it through a Null session.  If you had just the Users group, I would have to hack the user name and password to authenticate to the share.  Much better security.

Managing users on network shares takes some time and patience.  Some corporations have admins responsible for only this.  

BTW:  am sorry I forgot to mention that you may have to take ownership.  

Does this help?  :)
0
 
Fatal_ExceptionSystems EngineerCommented:
First, you should never use the Group Everyone in the Security Permissions tab.  This allows to much access and is a security issue.  Delete that group and add the Users group.  This will only allow authenticated users into this share.

Additionally, restrict the permissions as much as possible.  I usually do not allow Full Control, but in this situation, you may want to.

Go to the advanced tab and ck the box "Allow inheritible permissions" to propogate.  See if this fixes your problem.

FE
0
 
James HilloyaAuthor Commented:
i went to the security tab  on the share and click on advanced and checked the "allow inheritable permissions from parent to propagate to this opject...............users still cant access files that were created by another user.....any more ideas please??
0
Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

 
Fatal_ExceptionSystems EngineerCommented:
On that same page, did you try the Reset Inheritable Permissions ck box?  This should reset all permissions for all folders.

let me know what happens.

FE
0
 
James HilloyaAuthor Commented:
i tried this at first but it did not work..i got the message "you do not have permission to modifythis file" and i was logged in as administrator!!!...so i had to take ownership of the shared  then after that i tried the reset inheritable permissions box.....this worked!!...thanks for your help...i will award you the points...just one more thing...whats the difference between the users group and the everyone group???....because i had a share witht the everyone group with full access to it.....but none of my users could access that share unless i created their accounts....i thought if the everyone group had full access to a share then anybody could access that share even if that person did not have a account on the server...
0
 
James HilloyaAuthor Commented:
thanks... yes it helps.....just dont hack into my network. Thanks
0
 
Fatal_ExceptionSystems EngineerCommented:
Never would....    :)

Happy Holidays to you and yours.

FE
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.