Solved

Server 2012

Posted on 2014-02-28
20
528 Views
Last Modified: 2014-03-03
I have a 2012 server that I am working with.  I am very new to 2012.

I have a user folder that that I want to share.  It used to be in 2008 I could share the top level with authenticated users check all three boxes and then on the security tab.  I could control who could get access to what folder.  Here is what the folder setup looks like.

User - top level folder want to be able to read the subfolders
     abcsuer sub folder only want that user to get into the folder.
     xyzuser
     lmnuser

But it seems like that in 2012 it is either an all or nothing case.  I can not just give authenticated users in the share permission and then in the security tab just give the user who needs access access to their folder.

I would really appreciate some help.

Thanks,

Rick
0
Comment
Question by:RickArnold
20 Comments
 
LVL 7

Expert Comment

by:Sivaraj E
ID: 39896467
@ Rick - This need to be done on Server Manager, To understand in brief please have allok at the link below

www.techrepublic.com/blog/data-center/how-to-share-a-folder-in-windows-server-2012/

Regards, Shiva
0
 
LVL 56

Expert Comment

by:Cliff Galiher
ID: 39897037
2012 works the same as previous versions with regards to permissions in your scenario. You can open up the share, and then limit the NTFS permissions on the subfolders as you see fit. Where specifically are you getting stuck in the process?
0
 
LVL 11

Expert Comment

by:gmbaxter
ID: 39897289
Use server manager to set the top level share permissions, then use windows explorer to set the security on the subfolders
0
 

Author Comment

by:RickArnold
ID: 39897327
Cliff,

the top level folder is called users then there are multiple folders in the user folder that contain their data.  

I want everybody in the Domain to be able to click the top level folder and see the folders,
but when it comes to the individual folders only the owner is able to get into the folder.

Thanks,

Rick
0
 
LVL 56

Expert Comment

by:Cliff Galiher
ID: 39897333
I already understood that. But you said you did this in 2008, and I'm saying the way shares and NTFS permissions work in 2012 hasn't changed. So my question for you is where are you getting stuck?
0
 

Author Comment

by:RickArnold
ID: 39897385
Cliff,

I am getting stuck at the top level.  In my Lab I have set this up. This example should work the should when i get to the production network.

In the Lab

Driver folder  Share Tab

Everyone
Full control x
change        x
Read            x

Then I get into the driver folder I right click a folder inside go to the properties

Click the security tab
Edit button
and then I give my test user full control of that folder.
Everyone is not in the  Security Tab

However when those permissions are applied in that way, the test user cannot open the drivers folder over the network

Thanks,

Rick
0
 
LVL 56

Expert Comment

by:Cliff Galiher
ID: 39897389
Error?
0
 

Author Comment

by:RickArnold
ID: 39897398
Network Error

Windows cannot access \\server01\Drivers

You do not have permissions to access \\server01\drivers ....
0
 
LVL 56

Expert Comment

by:Cliff Galiher
ID: 39897411
Please post screen shots of the network permissions and NTFS permissions for both the shared folder and subfolder, as well as the username you are attempting your test with.
0
IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

 

Author Comment

by:RickArnold
ID: 39897491
OK,

I changed it a little to be more like the Production network.  

The user folder is visible from \\server01 the user share is visible.  When I click on it "Windows Cannot Access  \\Server01\ users

What I would like is to have the users click on the user folder get in, but when they click on a folder that is not theirs they are not able to open that folder.

Thanks very much for the help,

Rick
Users---Top-Level-Sharing.PNG
Users---Top-Level-Security.png
User-Folder---Sharing-Tab.PNG
User---Security-Tab-Rick-Ben-is-.PNG
User-Folder-From-Client-Rickb.PNG
0
 
LVL 56

Accepted Solution

by:
Cliff Galiher earned 500 total points
ID: 39897513
Well, the problem is that you didn't give NTFS permissions to the top level folder (security tab) so you are getting access denied. A user must both have share *and NTFS permissions. And just so we are clear, this isn't new in 2012. Your 2008 setup had to be this way too.

Add a group (I don't like "everyone" when a security group is better) and give them read permissions. I think you'll see your problem disappear.
0
 

Author Comment

by:RickArnold
ID: 39897597
0
 
LVL 56

Assisted Solution

by:Cliff Galiher
Cliff Galiher earned 500 total points
ID: 39897618
Inheritance. On the security tab if the top level folder,  go into advanced, and change the permissions for domain users from folders, subfolder, and file to folder only so it won't grant read permissions to the subfolders.
0
 

Author Comment

by:RickArnold
ID: 39897667
Cliff,

That did it. I forgot about that.  That worked I should be able to take this back to production!

Rick
0
 

Author Comment

by:RickArnold
ID: 39898141
I've requested that this question be closed as follows:

Accepted answer: 0 points for RickArnold's comment #a39897667

for the following reason:

Awesome effort !
0
 
LVL 56

Expert Comment

by:Cliff Galiher
ID: 39898142
You accepted your own comment as the answer after I walked you through all the permissions?!?
0
 

Author Comment

by:RickArnold
ID: 39901341
Cliff,

I hit the wrong button very sorry about that.  I meant to say Awesome effort Cliff.  I saw the objection this morning my mistake and my apologies.  

I do  have another question regarding the  permissions.  It works like I want but the reported can not save into the folder.

thanks,

Rick
0
 
LVL 56

Expert Comment

by:Cliff Galiher
ID: 39901355
Well, based on the screenshots you posted, the share permissions (not the NTFS permissions) only grant read access. So that is to be expected. Add write permissions to the share and things should work as expected.
0
 

Author Comment

by:RickArnold
ID: 39901473
Cliff,

that worked great.  Thanks again have a great week!

Rick
0

Featured Post

Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

Join & Write a Comment

In my previous 24 VMware Articles (http://www.experts-exchange.com/ARTH_1864316.html?arthOrderBy=3&arthSort=1#arth), most featured Intermediate VMware Topics. My next series of articles concentrated on topics for the VMware Novice;   If you would…
Know what services you can and cannot, should and should not combine on your server.
In this Micro Tutorial viewers will learn how they can get their files copied out from their unbootable system without need to use recovery services. As an example non-bootable Windows 2012R2 installation is used which has boot problems.
In this Micro Tutorial viewers will learn how to restore their server from Bare Metal Backup image created with Windows Server Backup feature. As an example Windows 2012R2 is used.

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now