NAS - ADS Permissions Problem

jdfuller
jdfuller used Ask the Experts™
on
Western Digital DL2100 joined to Server 2012 domain.  Can't set folder permissions within the share.  User Home (H:) directories are on the NAS and can be seen and mapped by login script but "\\NAS01\Everyone" has permission on all folders within the share and NAS01 is the only object from which to choose users instead of the DC.  So, do I have to put every user on the NAS to do this?  What good is ADS and joining to the domain if you can't control access?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
yo_beeDirector of Information Technology

Commented:
You should be able to just have to right click on the shared folder and apply NTFS permissions as you would any file share that is being hosts from a Windows servers.

Have you tried this method yet or you trying to do it from the NAS?

Author

Commented:
Correct but the only object from which to choose users is the NAS even though it is definitely part of the domain.  When I try to add the user whose folder it is I can't  select DC01 and find the user in the directory because only NAS01 is available.

Author

Commented:
The share is \\NAS01\Data\Home and I'm trying to set permissions on all the sub folders .  The only users on the folders under the Home folder are from the NAS object.  I can't add domain users.

Author

Commented:
Sorry to be choppy.  Using phone...

I'm adding users from the within the DC01 console connection right clicking on the folder, go to security and there add user whose folder it is.
Director of Information Technology
Commented:
You should be able to do the same using security groups   You may have to select the object Groups  to expose them when you are in the security properties of the folder.

Author

Commented:
Understood.  I have browsed the objects and only NAS01 shows up.

Author

Commented:
I have browsed "Locations" and only NAS01 shows up.

Author

Commented:
So I created a user (me) on the domain and put a pre-assign profile path H: for my home folder to be \\NAS01\Data\Home\[me] and I was not prompted like usual and asked if I wanted this user to be the sole owner of the folder when it was created, it just created it and closed the dialog.  I went to the NAS share and my folder was created and no domain users were on it, just the NAS01 user objects.  Useless!

Author

Commented:
DOH!! I went back through this morning to check to see if the domain was spelled correctly and during the "wizard" it asked if I wanted ADS turned on!! What?  I guess it was off because when I completed the wizard, everyone from the domain was now available.

yo_bee - You get all the points for hanging in there with the moron that can't understand the WD GUI!!
yo_beeDirector of Information Technology

Commented:
Thanks. You did not have to award me any.
You found the solution yourself.

Author

Commented:
To further the discussion, I have one folder I cannot take ownership of.  Any suggestions or do we create a new question?
yo_beeDirector of Information Technology

Commented:
Have you tried the TAKEOWN command?

takeown /f folder_name /r /d y

Open in new window

 icacls folder_name /grant username_or_usergroup:F /t /q

Open in new window

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial