Solved

SBS 2011 User Shared Folder Permissions

Posted on 2013-01-28
12
1,537 Views
Last Modified: 2013-02-03
I have User Shares set up on an SBS 2011 Server.

The path looks like this:  \\Server\Users\Shares

or

D:\Users\Shares

Everyone has access to their Shares as needed, however, apparently everyone else can access the other shares as well, which is not ok.

D: has several folders and misc. data and is thus shared out to all users. So I have to assume that someone my settings for the drive as a whole are trumping what I have set on my user share path.

I have been fiddling with this for hours without any progress, and the few "examples" I have found aren't really specific to my scenario and haven't helped.

I need instructions, essentially from the top down I'm guessing in order to get this squared away.

Many thanks!
0
Comment
Question by:tjwo94
  • 8
  • 4
12 Comments
 
LVL 13

Expert Comment

by:imkottees
ID: 38829115
Hi,

you can give folder level permission inside the shares right..
0
 

Author Comment

by:tjwo94
ID: 38829143
Yes....
0
 

Author Comment

by:tjwo94
ID: 38829144
Each individual user share inside the "Share" folder is setup such that only that user and an administrator has access to that person's share, however, it is not working out that way.
0
Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

 
LVL 13

Expert Comment

by:imkottees
ID: 38829157
you have to make sure that permissions are not inherited from parent folder to sub folders.
0
 

Author Comment

by:tjwo94
ID: 38829177
So for each individual share, I need to go into Properties--Security--Advanced--Change Permissions

and then UNcheck "Include inheritable permissions from this Objects parent"?

Is there a more efficient way to do this, if this is in fact the correct way?
0
 
LVL 13

Expert Comment

by:imkottees
ID: 38829246
maybe you can try with powershell command.
0
 

Author Comment

by:tjwo94
ID: 38829259
Well I tested this on one user folder, and was still able to access it with another user account.
0
 
LVL 13

Assisted Solution

by:imkottees
imkottees earned 200 total points
ID: 38829271
or else you go to properties of each subfolder and remove "everyone" from the ACL. Allow only for Admin and User who wants to access.
0
 

Author Comment

by:tjwo94
ID: 38829297
I have done this on a test user share, it's not working though.
0
 

Author Comment

by:tjwo94
ID: 38829307
I have a user shared folder that is not inheriting any permissions and only has the user and an admin with permission to access, but something is still overriding it.
0
 

Accepted Solution

by:
tjwo94 earned 0 total points
ID: 38832010
I got this figured out on my own. Essentially had to swap one user type with another and then restrict their permission to only be applied to the shared folder only so it wouldn't carry over to the individual user shares.
0
 

Author Closing Comment

by:tjwo94
ID: 38848289
Gave you some points for trying to help, Thank you.
0

Featured Post

NAS Cloud Backup Strategies

This article explains backup scenarios when using network storage. We review the so-called “3-2-1 strategy” and summarize the methods you can use to send NAS data to the cloud

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Remote Apps is a feature in server 2008 which allows users to run applications off Remote Desktop Servers without having to log into them to run the applications.  The user can either have a desktop shortcut installed or go through the web portal to…
The password reset disk is often mentioned as the best solution to deal with the lost Windows password problem. In Windows 2008, 7, Vista and XP, a password reset disk can be easily created. But besides Windows 7/Vista/XP, Windows Server 2008 and ot…
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…

830 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question