Expiring Today—Celebrate National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Folder NTFS Permissions

Posted on 2016-11-19
14
Medium Priority
?
143 Views
Last Modified: 2016-11-19
I posted this question.
https://www.experts-exchange.com/questions/28984180/Windows-Share-Security-permissions.html
Hard Part of it is Resolved.

Now on the Subfolders (Marketing , Sales)
I have added Security groups Marketing to Marketing folder and gave it Modify permissions
I have added Security groups Sales to Sales folder and gave it Modify permissions

However, I logged in to a computer as member of Marketing group, when I open for instance Marketing folder and
try to create a folder or text file inside of it I get a message: "You need permission to perform this Action"

Any idea of what I am missing?

Thank you
0
Comment
Question by:jskfan
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 4
  • 2
  • +3
14 Comments
 
LVL 7

Accepted Solution

by:
No More earned 1004 total points
ID: 41894298
check share permissions
0
 
LVL 16

Assisted Solution

by:Dirk Mare
Dirk Mare earned 332 total points
ID: 41894307
Make sure the Marketing and Sales folders are not inheriting the permissions from the parent folder.

DirkMare
0
 

Author Comment

by:jskfan
ID: 41894310
Cannot understand

Company (Share) : Advanced Sharing I added Authenticated Users :Read permission
How does this impact the Subfolders like Marketing and Sales ?

By the Way, Thank you David, after I saw your suggestion, I gave Authenticated users Change permission on Advanced Sharing at the Company Share level,  and managed to creatd a folder under Marketing..how do you explain it please?
0
Veeam Disaster Recovery in Microsoft Azure

Veeam PN for Microsoft Azure is a FREE solution designed to simplify and automate the setup of a DR site in Microsoft Azure using lightweight software-defined networking. It reduces the complexity of VPN deployments and is designed for businesses of ALL sizes.

 
LVL 7

Expert Comment

by:No More
ID: 41894314
Share permission are opening valve for NTFS permissions , if you have share permissions read and NTFS permissions for example : full control the user will get only read and execute NTFS permissions
0
 
LVL 7

Expert Comment

by:No More
ID: 41894316
0
 

Author Comment

by:jskfan
ID: 41894318
Good explanation David.
So at the Share level, does it matter if I give Change or Full ?
I know with Full at the Folder level, user can take ownership of the folder, but I am not sure at the Share level
0
 
LVL 83

Assisted Solution

by:David Johnson, CD, MVP
David Johnson, CD, MVP earned 332 total points
ID: 41894319
remember the most restrictive permission either the share or ntfs permission takes precedence
0
 
LVL 7

Expert Comment

by:No More
ID: 41894321
Most of IT guys would use share permission: everyone : full control and then limit and control rest with NTFS permissions, but you have different options
0
 

Author Comment

by:jskfan
ID: 41894333
Thank you..

Regarding Access Base Enumeration...is this Windows 2012 Feature only ?
0
 
LVL 7

Expert Comment

by:No More
ID: 41894335
I think it was possible since 2003 and from 2008 up for 100%
0
 
LVL 23

Assisted Solution

by:yo_bee
yo_bee earned 332 total points
ID: 41894342
It was an addin that needed to be install on 2003 and part to 2008 and newer.
http://www.microsoft.com/downloads/details.aspx?FamilyID=04a563d9-78d9-4342-a485-b030ac442084&DisplayLang=en
0
 

Author Closing Comment

by:jskfan
ID: 41894398
Thank you for your help Guys
0
 
LVL 23

Expert Comment

by:yo_bee
ID: 41894399
Just remember deny rights will trump any allow rights
0
 
LVL 56

Expert Comment

by:McKnife
ID: 41894424
About share permissions: Everyone modify. Don't use everyone: Full.
"the most restrictive takes precedence" - not wrong, but it has exceptions. "deny will trump allow" - same. Has exceptions, see https://www.experts-exchange.com/questions/22108365/NTFS-and-share-permissions-I-found-a-difference-where-there-should-not-be-any.html
0

Featured Post

Are You Ready for GDPR?

With the GDPR deadline set for May 25, 2018, many organizations are ill-prepared due to uncertainty about the criteria for compliance. According to a recent WatchGuard survey, a staggering 37% of respondents don't even know if their organization needs to comply with GDPR. Do you?

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Microsoft Office 365 is a subscriptions based service which includes services like Exchange Online and Skype for business Online. These services integrate with Microsoft's online version of Active Directory called Azure Active Directory.
Wouldn't it be nice if objects in Active Directory automatically moved into the correct Organizational Units? This is what AutoAD aims to do and as a plus, it automatically creates Sites, Subnets, and Organizational Units.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

719 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question