Solved

SBS 2011 User Shared Folder Permissions

Posted on 2013-01-28
12
1,493 Views
Last Modified: 2013-02-03
I have User Shares set up on an SBS 2011 Server.

The path looks like this:  \\Server\Users\Shares

or

D:\Users\Shares

Everyone has access to their Shares as needed, however, apparently everyone else can access the other shares as well, which is not ok.

D: has several folders and misc. data and is thus shared out to all users. So I have to assume that someone my settings for the drive as a whole are trumping what I have set on my user share path.

I have been fiddling with this for hours without any progress, and the few "examples" I have found aren't really specific to my scenario and haven't helped.

I need instructions, essentially from the top down I'm guessing in order to get this squared away.

Many thanks!
0
Comment
Question by:tjwo94
  • 8
  • 4
12 Comments
 
LVL 13

Expert Comment

by:imkottees
ID: 38829115
Hi,

you can give folder level permission inside the shares right..
0
 

Author Comment

by:tjwo94
ID: 38829143
Yes....
0
 

Author Comment

by:tjwo94
ID: 38829144
Each individual user share inside the "Share" folder is setup such that only that user and an administrator has access to that person's share, however, it is not working out that way.
0
Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

 
LVL 13

Expert Comment

by:imkottees
ID: 38829157
you have to make sure that permissions are not inherited from parent folder to sub folders.
0
 

Author Comment

by:tjwo94
ID: 38829177
So for each individual share, I need to go into Properties--Security--Advanced--Change Permissions

and then UNcheck "Include inheritable permissions from this Objects parent"?

Is there a more efficient way to do this, if this is in fact the correct way?
0
 
LVL 13

Expert Comment

by:imkottees
ID: 38829246
maybe you can try with powershell command.
0
 

Author Comment

by:tjwo94
ID: 38829259
Well I tested this on one user folder, and was still able to access it with another user account.
0
 
LVL 13

Assisted Solution

by:imkottees
imkottees earned 200 total points
ID: 38829271
or else you go to properties of each subfolder and remove "everyone" from the ACL. Allow only for Admin and User who wants to access.
0
 

Author Comment

by:tjwo94
ID: 38829297
I have done this on a test user share, it's not working though.
0
 

Author Comment

by:tjwo94
ID: 38829307
I have a user shared folder that is not inheriting any permissions and only has the user and an admin with permission to access, but something is still overriding it.
0
 

Accepted Solution

by:
tjwo94 earned 0 total points
ID: 38832010
I got this figured out on my own. Essentially had to swap one user type with another and then restrict their permission to only be applied to the shared folder only so it wouldn't carry over to the individual user shares.
0
 

Author Closing Comment

by:tjwo94
ID: 38848289
Gave you some points for trying to help, Thank you.
0

Featured Post

Live: Real-Time Solutions, Start Here

Receive instant 1:1 support from technology experts, using our real-time conversation and whiteboard interface. Your first 5 minutes are always free.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The password reset disk is often mentioned as the best solution to deal with the lost Windows password problem. In Windows 2008, 7, Vista and XP, a password reset disk can be easily created. But besides Windows 7/Vista/XP, Windows Server 2008 and ot…
You may have discovered the 'Compatibility View Settings' workaround for making your SBS 2008 Remote Web Workplace 'connect to a computer' section stops 'working around' after a Windows 10 client upgrade.  That can be fixed so it 'works around' agai…
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

786 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question