More Windows Share Problems, Wo is Me????

Posted on 2006-05-17
Last Modified: 2010-03-19
OK I asked a question the other day about Access denied to windows shares and got an awesome response, fixed the problem, now I have almost the exat opposite problem.

I have a Domain(Win 2003) with Active Directory and some big hard disc's with a bunch of files and folders on them, the folders being secured using A\D...
I can see the domain, files and folders from all computers on my network, I can map the secure folders folders using specific A\D login's but I can't seem to wirte to the folders???
Now if I make the folder a share on the network and set the permissions to the share for a specific user I gain write access for that user.
My problem is that I don't want to create 50 shares on my network. I don't understand why if I set the permissions for the user to full control, he/she can access the folder but cannot write to it?

Question by:salsipius
    LVL 95

    Expert Comment

    by:Lee W, MVP
    What are the share permissions - typically, the SHARE permissions should be set to EVERYONE:FULL - 2003 sets them to EVERYONE:READ ONLY.  (This is a very similar if not identical answer to your previous question but without know what exactly a given share's permissions are, I can't say).
    LVL 2

    Accepted Solution

    There are 2 types of permissions that come into play here.  Share level permissions (since we are accessing files across the network), and NTFS permissions (local permissions set on the servers hard drive).
    Share level permissions are permissions that are applied when a file/folder/share is accessed over the network.
    NTFS level permissions (ie: The Security tab in folder properties) are applied when a file/folder/share is accessed from the servers hard drive.  (locally and remotely).

    2003 server will use the MOST restrictive permissions set.

    Example:  Share name  "DATA"   Folder location:  "D:\Shared\Data"
    Share permissions:  
        JDoe=Read Only.  
        BSmith=Full Control.  
        JJones=Full Control.
    NTFS persmissions:  
        Jdoe=Full Control.  
        BSmith=Read and execute,List folder contents.  
        JJones=Full Control.

    JDoe - Will be able to read the files and data in the share, but will not be able to write. (Share level is the most restrictive in this case so it is applied over the network.. Jdoe=Read Only, where NTFS allows Jdoe to have full control).  If Jdoe could log in to the server console, then JDoe would have full control access to the D:\Shared\Data folder.

    BSmith - Will be able to read the files and data in the share, but will not be able to write. (NTFS level is the most restrictive in this case so it is applied locally on the server, and does not allow the higher level access requested across the network.)  If BSmith could log in to the server console, then BSmith would only be able to READ and Execute programs in the D:\Shared\Data folder,  No Writing.

    JJones - Will be able to Read and Write to the files and data in the share. (Both NTFS and Share level permissions permit JJones Full Control access).  If JJones could log in to the server console, then JJones would have full control of files/folders/permissions in the D:\Shared\Data folder.

    Featured Post

    Highfive Gives IT Their Time Back

    Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

    Join & Write a Comment

    What is IRC? IRC (Internet Relay Chat) is a form of communication between multiple users. It is available freely to anyone with inernet access. IRC is a great way to communicate with others e.g. There is an IRC channel for Ubuntu Linux, which is fo…
    Data center, now-a-days, is referred as the home of all the advanced technologies. In-fact, most of the businesses are now establishing their entire organizational structure around the IT capabilities.
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
    Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

    733 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    22 Experts available now in Live!

    Get 1:1 Help Now