Jharrisonsnbs
asked on
Windows Server 2008R2 File Share permissions
Hello All, I'm having a lot of issues with file permissions and sharing on a 2008R2 server. I have an E: partition that I've created several subfolders and I'm trying to allow users access through mapped drives, but the permissions don't appear to be applying correctly. I have the following subfolders:
Apps
Jobs
Shared
Under those folders, there are subfolders which should have permissions too. I have Domain Users set to be able to access the shared folder and modify it, but they are unable to write anything to the folder. They receive an access denied. The mapped drive does show them the folder, but they are unable to modify anything. However, if I right-click on the actual E: drive and select share and give everyone full control, they are able to modify the folders. The only problem is that now they have full control of the other folders, Jobs and Apps, that they shouldn't have access to. I've read some technet articles that say the only thing you should need to setup is the NTFS (security tab) permissions because that controls local and network access to folders. I've tried breaking the inheritance and manually setting the NTFS permissions on the folder to with no luck. The only thing that seems to allow them access is by sharing the E: drive, which gives them the full control. UAC is disabled on the server, but I don't think that would make a difference. Any help would be greatly appreciated!
Apps
Jobs
Shared
Under those folders, there are subfolders which should have permissions too. I have Domain Users set to be able to access the shared folder and modify it, but they are unable to write anything to the folder. They receive an access denied. The mapped drive does show them the folder, but they are unable to modify anything. However, if I right-click on the actual E: drive and select share and give everyone full control, they are able to modify the folders. The only problem is that now they have full control of the other folders, Jobs and Apps, that they shouldn't have access to. I've read some technet articles that say the only thing you should need to setup is the NTFS (security tab) permissions because that controls local and network access to folders. I've tried breaking the inheritance and manually setting the NTFS permissions on the folder to with no luck. The only thing that seems to allow them access is by sharing the E: drive, which gives them the full control. UAC is disabled on the server, but I don't think that would make a difference. Any help would be greatly appreciated!
Brian Pierce
Check the permission on the SHARE - the default is Everyone - READ and when you have a combination of SHARE and NTFS permissions the most restrictive applies
KCTS is correct. NTFS is likely your problem. Make sure the group that that needs the map drive has full control or at least modify/write permissions at the share & NTFS levels.
In addition ensure that Allow inheritable permissions from parent on parent folder is selected:http://support.microsoft.com/kb/313398.
On the share folder as mentioned above assign modify and read permision to every one and then test the same.
On the share folder as mentioned above assign modify and read permision to every one and then test the same.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thanks all for the feedback! I had root inheritance set and that was causing the issue. As soon as I broke it and did the granular NTFS it all worked perfectly. Thank you!!!