Link to home
Start Free TrialLog in
Avatar of Dan560
Dan560Flag for United Kingdom of Great Britain and Northern Ireland

asked on

How to allow a domain user to modify the share permissions

Hi,

I have a domain admin he isnt part of the domain administrators group but he does have full control of a department shared folder. I want him to be able to modify the shared permissions of a folder on windows 2003 shared folder.
When I add him to the shared folder permissions I give him full control and full control in the security permissions but when I he clicks he adds groups himself he gets an access denied message.
Any ideas?
Avatar of Glen Knight
Glen Knight
Flag of United Kingdom of Great Britain and Northern Ireland image

as long as the NTFS permissions are set to FULL they should be able to set the permissions.

Unless they are a member of a group that has DENY full permission?
When does the access Denied message appear:
1- When he tries to access the share?
or
2- When he tries to browse the Directory for users to add permissions?
Avatar of Dan560

ASKER

Number 2
When he adds the users.

I see where demazter is coming from he is only a regular user. He is part of the domain users group and the everyone group and both these groups do not have full control over the this folder.
Permissions are accumulative unless there is a specific deny permission.
Can you do a screen capture and post?
Avatar of Dan560

ASKER

Here you go
He is part of the system admins group. and I he is trying to modify the sharing permissions for the folder "apps"

Error-while-modify-shareing-perm.BMP
Security-permissions.bmp
Share-Permissions.bmp
That error message is from the share permissions not the NTFS permissions?
Avatar of Dan560

ASKER

Yes sorry
ASKER CERTIFIED SOLUTION
Avatar of Glen Knight
Glen Knight
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Dan560

ASKER

I do not think I have a power users group. But I do not want them to be part of the domain admins or administrators group. Is there a work around?