Server 2012

I have a 2012 server that I am working with.  I am very new to 2012.

I have a user folder that that I want to share.  It used to be in 2008 I could share the top level with authenticated users check all three boxes and then on the security tab.  I could control who could get access to what folder.  Here is what the folder setup looks like.

User - top level folder want to be able to read the subfolders
     abcsuer sub folder only want that user to get into the folder.
     xyzuser
     lmnuser

But it seems like that in 2012 it is either an all or nothing case.  I can not just give authenticated users in the share permission and then in the security tab just give the user who needs access access to their folder.

I would really appreciate some help.

Thanks,

Rick
RickArnoldAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Sivaraj ELead – IT InfrastructuresCommented:
@ Rick - This need to be done on Server Manager, To understand in brief please have allok at the link below

www.techrepublic.com/blog/data-center/how-to-share-a-folder-in-windows-server-2012/

Regards, Shiva
0
Cliff GaliherCommented:
2012 works the same as previous versions with regards to permissions in your scenario. You can open up the share, and then limit the NTFS permissions on the subfolders as you see fit. Where specifically are you getting stuck in the process?
0
gmbaxterCommented:
Use server manager to set the top level share permissions, then use windows explorer to set the security on the subfolders
0
Protecting & Securing Your Critical Data

Considering 93 percent of companies file for bankruptcy within 12 months of a disaster that blocked access to their data for 10 days or more, planning for the worst is just smart business. Learn how Acronis Backup integrates security at every stage

RickArnoldAuthor Commented:
Cliff,

the top level folder is called users then there are multiple folders in the user folder that contain their data.  

I want everybody in the Domain to be able to click the top level folder and see the folders,
but when it comes to the individual folders only the owner is able to get into the folder.

Thanks,

Rick
0
Cliff GaliherCommented:
I already understood that. But you said you did this in 2008, and I'm saying the way shares and NTFS permissions work in 2012 hasn't changed. So my question for you is where are you getting stuck?
0
RickArnoldAuthor Commented:
Cliff,

I am getting stuck at the top level.  In my Lab I have set this up. This example should work the should when i get to the production network.

In the Lab

Driver folder  Share Tab

Everyone
Full control x
change        x
Read            x

Then I get into the driver folder I right click a folder inside go to the properties

Click the security tab
Edit button
and then I give my test user full control of that folder.
Everyone is not in the  Security Tab

However when those permissions are applied in that way, the test user cannot open the drivers folder over the network

Thanks,

Rick
0
Cliff GaliherCommented:
Error?
0
RickArnoldAuthor Commented:
Network Error

Windows cannot access \\server01\Drivers

You do not have permissions to access \\server01\drivers ....
0
Cliff GaliherCommented:
Please post screen shots of the network permissions and NTFS permissions for both the shared folder and subfolder, as well as the username you are attempting your test with.
0
RickArnoldAuthor Commented:
OK,

I changed it a little to be more like the Production network.  

The user folder is visible from \\server01 the user share is visible.  When I click on it "Windows Cannot Access  \\Server01\ users

What I would like is to have the users click on the user folder get in, but when they click on a folder that is not theirs they are not able to open that folder.

Thanks very much for the help,

Rick
Users---Top-Level-Sharing.PNG
Users---Top-Level-Security.png
User-Folder---Sharing-Tab.PNG
User---Security-Tab-Rick-Ben-is-.PNG
User-Folder-From-Client-Rickb.PNG
0
Cliff GaliherCommented:
Well, the problem is that you didn't give NTFS permissions to the top level folder (security tab) so you are getting access denied. A user must both have share *and NTFS permissions. And just so we are clear, this isn't new in 2012. Your 2008 setup had to be this way too.

Add a group (I don't like "everyone" when a security group is better) and give them read permissions. I think you'll see your problem disappear.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
RickArnoldAuthor Commented:
0
Cliff GaliherCommented:
Inheritance. On the security tab if the top level folder,  go into advanced, and change the permissions for domain users from folders, subfolder, and file to folder only so it won't grant read permissions to the subfolders.
0
RickArnoldAuthor Commented:
Cliff,

That did it. I forgot about that.  That worked I should be able to take this back to production!

Rick
0
RickArnoldAuthor Commented:
I've requested that this question be closed as follows:

Accepted answer: 0 points for RickArnold's comment #a39897667

for the following reason:

Awesome effort !
0
Cliff GaliherCommented:
You accepted your own comment as the answer after I walked you through all the permissions?!?
0
RickArnoldAuthor Commented:
Cliff,

I hit the wrong button very sorry about that.  I meant to say Awesome effort Cliff.  I saw the objection this morning my mistake and my apologies.  

I do  have another question regarding the  permissions.  It works like I want but the reported can not save into the folder.

thanks,

Rick
0
Cliff GaliherCommented:
Well, based on the screenshots you posted, the share permissions (not the NTFS permissions) only grant read access. So that is to be expected. Add write permissions to the share and things should work as expected.
0
RickArnoldAuthor Commented:
Cliff,

that worked great.  Thanks again have a great week!

Rick
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2012

From novice to tech pro — start learning today.