Solved

Windows 2003 Server - File Sharing

Posted on 2011-09-30
8
210 Views
Last Modified: 2012-05-12
Hi,

Need help with network file sharing. We have Windows network with XP clients and Windows 2003 Server for sharing data over the network

Scenario:

Server is called 'File-Server'
Share directory called 'Accounts' with sub-directories: Costing, Budget, Invoicing
3 Security Groups: Group A, Group B, Group C

Group A & B have full rights to the 'Accounts' folder and its sub-directories
Group C has only 'Read' access to the 'Accounts' folder and its sub-directories

I now want to give 'Group C' full rights to the Invoicing sub-directoy only.

Can someone point me in a right direction?

Many thanks,  
0
Comment
Question by:AKTII-UK
  • 3
  • 2
  • 2
  • +1
8 Comments
 
LVL 39

Expert Comment

by:Krzysztof Pytko
ID: 36890868
Where is this "Invoicing" sub dir ?
You can use "Advanced" options to grant them rights. Go to that folder, choose "Properties" and then "Advanced". From the list choose GroupC, grant them Modify rights and change scope to "This folder and files only"

Do not grant them Full Control, they would be able to change ACL and grant access to lower folders for themselves.

Permissions
Regards,
Krzysztof
0
 
LVL 8

Expert Comment

by:bright12
ID: 36890876
Select the sharing tab of the Invoicing folder. Select then Group C and give them full rights.

This should do the trick.
0
 

Author Comment

by:AKTII-UK
ID: 36890897
thanks for you response, i've tired both of yours suggestion but it still becomes read only
0
 
LVL 39

Expert Comment

by:Krzysztof Pytko
ID: 36890904
Check if you have no "Deny" permission for write/change inherited from other level ?
From my attached screen select also "Apply these .... " and check again

Krzysztof
0
What Should I Do With This Threat Intelligence?

Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

 
LVL 8

Expert Comment

by:bright12
ID: 36890912
OK. Select the invoice folder and right click on it.
Select then Sharing and Security..

Click on the Permissions button.

Select now group c and check the Full Control option to Allow.
Click Apply -> OK -> Apply -> OK

This should work
0
 
LVL 5

Accepted Solution

by:
peter197911 earned 500 total points
ID: 36890946
One question first.
How do you browse to the other shares.

\\file-server\accounts     --> and then choose the folder you need   or
are the other subfolders shared directly.
I'll describe thefor me, the most preferable option.

d:\ accounts   should have:    Share permissions for Domain users (full control)
                                                NTFS permissions on d:\accounts for Group A+B (full control)
                                                NTFS permissions on d:\accounts for Group C  (Read only)
                                                NTFS permissions on d:\accounts\invoice for Group C (full control)

voila.
0
 

Author Comment

by:AKTII-UK
ID: 36890973
Hello Peter,

the shares are accesed via  \\file-server\accounts     --> and then choose the folder you need

i'll try your method now and let you know what happens.
0
 

Author Closing Comment

by:AKTII-UK
ID: 36901941
Thanks to everyone for your suggestion
0

Featured Post

Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

Join & Write a Comment

The HP utility "HP Lights-Out Online Configuration Utility for Windows Server 2003/2008" could be of great use when it comes to remotely configure a HP servers ILO WITHOUT rebooting the server. We would only need to create and run scripts using thi…
Scenerio: You have a server running Server 2003 and have applied a retail pack of Terminal Server Licenses.  You want to change servers or your server has crashed and you need to reapply the Terminal Server Licenses. When you enter the 16-digit lic…
It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now