2003 server: Users/File Sharing/Security Questions

Posted on 2004-11-17
Last Modified: 2010-03-18
I have the server setup.. made a share called "share" and put a few folders in it (one for each dept), copied about 1/2 the folders over..

I assume i could now just control who accesses what by assigning users rights to the folders. However, when i go into security on the folders, i want to just give one user control, so i add then, then i take out the group "users" (which is everyone), but it won't let take that group out. so i thought i could just deny the group users, and give the users I want to have access control. But now it says that if the user i give control is in the group "users" (which they of course area), they too will be denied..

So what am i doing wrong? Should users not be a memeber of the group users? Why can't i remove the group users from the security settings for the files? how do i go about just letting one or 2 users have full control on the folder, and everyone else can't even access it. (total access denied for them).

also what group (beside the ones i create) should my users be members of. Seeing they are automatically in the group domain users and users. and some other odd ones..

all a bit conjfusing to me.

Question by:micamedia
    1 Comment
    LVL 1

    Accepted Solution

    You have to remove inheritance for the users group.  Simply do this:

    1.  Go to the security tab of the share.
    2.  Click "advanced" down the bottom
    3.  Uncheck the "Allow inheritable permissions from the parent to...."
    4.  At the prompt choose to copy the existing permissions.
    5.  You can now delete the users group and add just the permissions you need.  Or you can just assign read permissions to the users group if you need everyone to read and give that one specific user modify permissions.
    6.  Remember that you need to also give that user modify share permissions.  Go to the Sharing tab and click permissions - it should already have the "everyone" group in there with Read permissions.  You can either change this to "change" and use the previous NTFS permissions to secure or you can leave everyone with READ and just add the user with change.

    Hope this helps.


    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    Join & Write a Comment

    This article is in response to a question ( here at Experts Exchange. The Original Poster (OP) requires a utility that will accept a list of IP addresses …
    We recently endured a series of broadcast storms that caused our ISP to shut us down for brief periods of time. After going through a multitude of tests, we determined that the issue was related to Intel NIC drivers on some new HP desktop computers …
    In this sixth video of the Xpdf series, we discuss and demonstrate the PDFtoPNG utility, which converts a multi-page PDF file to separate color, grayscale, or monochrome PNG files, creating one PNG file for each page in the PDF. It does this via a c…
    Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

    754 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    20 Experts available now in Live!

    Get 1:1 Help Now