Solved

Move Folder Problem - Access Denied - SBS 2008 NTFS File/Folder Permissions

Posted on 2010-08-27
2
2,073 Views
Last Modified: 2012-05-10
We're having a problem where a user moves a file or folder from their My Documents (which is redirected to the server) and then they become the owner of the file/folder. When I log into the server using our Administrator's account (username is not Administrator) I can apply a different security group to a given folder but it returns "Access Denied" errors when it hits the files and folders that I'm referring to. These files and folders were transferred to this "public" shared folder by someone in the SBS Users group, not the Administrators group so I can't understand why I'm unable to take control of those files/folders.

I think this problem has something to do with the NTFS permissions because we are allowing everyone to have Full Control on the sharing/SMB permissions. I understand it's a best practice on SBS 2008 to control file and folder access through NTFS permissions only.

I'm sure someone will ask whether or not we are using the SBS file sharing wizard. Yes, we used it to establish what you might call the root share or the top level share but we are using NTFS permissions (not the wizard) to gain more granular control over who has access and who does not on subfolders contained inside the original "top level" share. We are trying to avoid nested shares since I strongly dislike when users have more than one way to access the same file. Nested shares get very confusing to everyone involved.

Any ideas?
0
Comment
Question by:HKComputer
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 63

Expert Comment

by:SysExpert
ID: 33546167
You might need to take ownership before changing the permissions.

I hope this helps !
0
 
LVL 4

Accepted Solution

by:
HKComputer earned 0 total points
ID: 33550634
We had to change the way the permissions work on this drive. The permissions are not inherited from the root of the drive but they are inherited inside each of our folders.

We needed to prevent this permissions problem from happening when users copy files so that's why just taking ownership isn't a solution.
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
Resolving an irritating Remote Desktop connection that stops your saved credentials from being used.
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
Suggested Courses

628 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question