Solved

Windows 2000 permissions not working?

Posted on 2004-10-16
5
259 Views
Last Modified: 2010-08-05
I have a folder which I took off inheritable permissions and the NTFS acl shows

admins=FC
Everyone=Read
Managers=Read

Share permissions=everyone FC

If an admin creates a file the managers can still delete it.  I went to the advanced section and removed everyone and managers from the acl and left the upper level permissions as read only.  I can't for the life of me figure out how and why these groups can still add and delete files in this folder.  Again, no inheritable permissions are trickling down.

THanks in advance!


0
Comment
Question by:zenportafino
5 Comments
 
LVL 9

Expert Comment

by:cooledit
ID: 12331311
hi, Zen

What's the permission on the top folder.
0
 
LVL 11

Accepted Solution

by:
KaliKoder earned 350 total points
ID: 12331584
Hello zenportafino,

Can you do the following :

- Right Click on your shared folder, go to properties, then select security. Now click on the advanced button and uncheck the "Allow inherrritable permissions" When asked if you want to replace or copy permissions, choose copy. Click Apply and click ok

- While still in the security tab, now put the permissions you want, ie; Admin = FC, Everyone = Read, Managers = Read. Hit Apply. Now click the advanced button one more time,  and on ther permissions tab you get, make sure you check the box that says "Replace permission entries on all chid objects" and click Apply, then click ok and ok one more time to get out of everything.

Now try it, and let us know your results

Thanks and Good Luck!
0
 
LVL 2

Assisted Solution

by:kobebe
kobebe earned 50 total points
ID: 12331598
hi

the way I see it there are 2 options
either everyone/managers are part of the local administrators group or you have a salat in the permisions in the active directory, somehow giving everyone group an "administrators" permisions
look closely into you're drector service
0
 
LVL 3

Expert Comment

by:_anom_
ID: 12335171
Also check where you have the permissions applying to--Files only, Folder only, etc.

Cheers
0
 
LVL 1

Author Comment

by:zenportafino
ID: 12335501
The users had "log on locally" rights to the server and that messed things up though I still don't understand how that would mess up the ntfs rights.  Anyway, thanks for the good tips and help.

0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

Some time ago I was asked to set up a web portal PC to put at our entrance. When customers arrive, they could see a webpage 'promoting' our company. So I tried to set up a windows 7 PC as a kiosk PC.......... I will spare you all the annoyances I…
Meet the world's only “Transparent Cloud™” from Superb Internet Corporation. Now, you can experience firsthand a cloud platform that consistently outperforms Amazon Web Services (AWS), IBM’s Softlayer, and Microsoft’s Azure when it comes to CPU and …
Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now