Server 2003 folder permissions

Posted on 2012-08-21
Last Modified: 2012-10-14
i was setting some folder security permissions and ran into an interesting problem.  I created universal security groups for different permission levels, i.e. "Folder XYZ Read Only".  In that group I added users who would need those permissions.  The problem came when I tried to add another security group ("Exec" for instance) as a member of the new group - those folks didn't get access.

I always thought you could add a group to another group for permission settings; am I wrong about that or am I doing something wrong?

Question by:tmckinney01
    LVL 15

    Expert Comment

    Did you set permissions on both share and folder? Also try reconnecting share if it is already mapped. Also check effective permission of the users/group having issues are not set with deny permission.
    LVL 8

    Expert Comment

    Typically, you create a Local Group on the machine involved, and then add a Global Group as a member of the Local Group. Grant the permissions at the Local Group level, and add your users to the Global Group.

    Also, be very careful about any Deny settings, anywhere. Denies are processed last, so any other permissions you set will be overwritten if there's a conflicting Deny anywhere in the permissions list.

    Author Comment


    When you say "create a local group", do you me a "Domain Local Group"?  I have never used that option before.  In my instance, both groups were universal security groups.

    Accepted Solution

    Question unanswered.  I'll just put the users in individually.

    Author Closing Comment

    No answer.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How to improve team productivity

    Quip adds documents, spreadsheets, and tasklists to your Slack experience
    - Elevate ideas to Quip docs
    - Share Quip docs in Slack
    - Get notified of changes to your docs
    - Available on iOS/Android/Desktop/Web
    - Online/Offline

    Suggested Solutions

    Organizations create, modify, and maintain huge amounts of data to help their businesses earn money and generally function.  Typically every network user within an organization has a bit of disk space to store in process items and personal files.   …
    ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
    It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
    This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor ( If you're looking for how to monitor bandwidth using netflow or packet s…

    737 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    22 Experts available now in Live!

    Get 1:1 Help Now