Windows 2000 Permissions

Hi Experts I have a huge problem...i have a windows 2000 server....i have s folder called  Vol2 that is shared....under security permissions there is a "everyone " group with full access to it...all my users can see that share fine.... the share has many subfolders in it...and  if a user creates a file  then other users cannot access that file .....the users that created that file has to give gim permissions to that file so that he can access it.......is there a way to make it so that everytime a user creates a file in that shared  folder on the windows 2000 server be accessible by any other user with out having the creator of the file have to give gim permissions to it??? thanks experts!! ..
LVL 1
James HilloyaAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Fatal_ExceptionSystems EngineerCommented:
First, you should never use the Group Everyone in the Security Permissions tab.  This allows to much access and is a security issue.  Delete that group and add the Users group.  This will only allow authenticated users into this share.

Additionally, restrict the permissions as much as possible.  I usually do not allow Full Control, but in this situation, you may want to.

Go to the advanced tab and ck the box "Allow inheritible permissions" to propogate.  See if this fixes your problem.

FE
0
James HilloyaAuthor Commented:
i went to the security tab  on the share and click on advanced and checked the "allow inheritable permissions from parent to propagate to this opject...............users still cant access files that were created by another user.....any more ideas please??
0
Fatal_ExceptionSystems EngineerCommented:
On that same page, did you try the Reset Inheritable Permissions ck box?  This should reset all permissions for all folders.

let me know what happens.

FE
0
Protecting & Securing Your Critical Data

Considering 93 percent of companies file for bankruptcy within 12 months of a disaster that blocked access to their data for 10 days or more, planning for the worst is just smart business. Learn how Acronis Backup integrates security at every stage

James HilloyaAuthor Commented:
i tried this at first but it did not work..i got the message "you do not have permission to modifythis file" and i was logged in as administrator!!!...so i had to take ownership of the shared  then after that i tried the reset inheritable permissions box.....this worked!!...thanks for your help...i will award you the points...just one more thing...whats the difference between the users group and the everyone group???....because i had a share witht the everyone group with full access to it.....but none of my users could access that share unless i created their accounts....i thought if the everyone group had full access to a share then anybody could access that share even if that person did not have a account on the server...
0
Fatal_ExceptionSystems EngineerCommented:
The Users group contains ONLY authenticated users in the Domain.  The Everyone group includes everyone that could possibly get onto your network.  For instance, if I was able to hack past your firewall, and you had the Everyone group included in your shares, I could access it through a Null session.  If you had just the Users group, I would have to hack the user name and password to authenticate to the share.  Much better security.

Managing users on network shares takes some time and patience.  Some corporations have admins responsible for only this.  

BTW:  am sorry I forgot to mention that you may have to take ownership.  

Does this help?  :)
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
James HilloyaAuthor Commented:
thanks... yes it helps.....just dont hack into my network. Thanks
0
Fatal_ExceptionSystems EngineerCommented:
Never would....    :)

Happy Holidays to you and yours.

FE
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 2000

From novice to tech pro — start learning today.