group access to shared folder

Hello,

I have setup a shares for the following:

d:\share = \\server\share

All users have read access.

I have setup groups to provide different access.

d:\share\department1  - dept1 can have full control, all others can read only
d:\share\department2 - dept2 can have full control, all others can read only

How can I provide one share so I change access by groups for different folders?
tucktechAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Mike KlineCommented:
You can give them full control via share and then you can use NTFS permissions on the folder (right click on the folder and then the security tab)

So you setup dept1 the way you described and then dept2.  
Thanks

Mike
0
tucktechAuthor Commented:
I did this and they the group I tested had full control in the root directory and every directory of the share.

More specifically I gave read/write share control to all users.  I had already changed the security access availalbe at the sub folder levels.

Rather than giving full control to everyone should I list the groups individually in the share?
0
hirenvmajithiyaManager (System Administration)Commented:
As share permission and NTFS permission takes effect back to back, you can give full access to everyone one \\server\share folder and then in NTFS you assign permission as you need.

Hiren
0
10 Tips to Protect Your Business from Ransomware

Did you know that ransomware is the most widespread, destructive malware in the world today? It accounts for 39% of all security breaches, with ransomware gangsters projected to make $11.5B in profits from online extortion by 2019.

mbm2708Commented:
hi man

simple

you create 2 groups dep1 and dep 2  put the user on the right group dont forget setup the group as security group and global group

go to the share management and click on the propriets of department1 and add the group dep1 and put as full permission and everyone as read permission
the same to the department2



thank you
0
tucktechAuthor Commented:
None of this is working as I would think. Let me explain further and you may be able to see my error in applying the access.

Everyone has use of the share drive via an s: drive.  In other words, if I were to setup from the command prompt.  I would type net use s: \\server\share.  Everyone has this same "use" statement.

What I wanted to do was for everyone to have the same "s" drive and to control access via groups.  Via the share from the server (and note I am using DFS). I provided everyone read access.  Then I went, on the server, and allowed specific group access to their folder.  My results was that when i logged in as a member of a share that should have had access, I got access denied when I tried to create a folder.

When I went back and provided full control for the share with a specific group, that allowed full control regardless of the NTFS security.

It appears share overrules NTFS security.

Help....
0
tucktechAuthor Commented:
AHH HA!  I figured it out.

ON the root share directory I had to remove the "Include inheritable permissions from this object's parent" found in the folders Properties | Security | Advanced.

Once I did this it all came together.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
tucktechAuthor Commented:
I had already understood what the other comments provided.  Once I went back and read through how the permissions work for Server 2008, etc.. I found that I did NOT want inheratence for the root object.  Once I did this it worked.  None of the answers were wrong they just did not include this required piece of information to fix my concern.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.