Solved

Folder NTFS Permissions

Posted on 2016-11-19
14
91 Views
Last Modified: 2016-11-19
I posted this question.
https://www.experts-exchange.com/questions/28984180/Windows-Share-Security-permissions.html
Hard Part of it is Resolved.

Now on the Subfolders (Marketing , Sales)
I have added Security groups Marketing to Marketing folder and gave it Modify permissions
I have added Security groups Sales to Sales folder and gave it Modify permissions

However, I logged in to a computer as member of Marketing group, when I open for instance Marketing folder and
try to create a folder or text file inside of it I get a message: "You need permission to perform this Action"

Any idea of what I am missing?

Thank you
0
Comment
Question by:jskfan
  • 5
  • 4
  • 2
  • +3
14 Comments
 
LVL 7

Accepted Solution

by:
No More earned 251 total points
ID: 41894298
check share permissions
0
 
LVL 16

Assisted Solution

by:Dirk Mare
Dirk Mare earned 83 total points
ID: 41894307
Make sure the Marketing and Sales folders are not inheriting the permissions from the parent folder.

DirkMare
0
 

Author Comment

by:jskfan
ID: 41894310
Cannot understand

Company (Share) : Advanced Sharing I added Authenticated Users :Read permission
How does this impact the Subfolders like Marketing and Sales ?

By the Way, Thank you David, after I saw your suggestion, I gave Authenticated users Change permission on Advanced Sharing at the Company Share level,  and managed to creatd a folder under Marketing..how do you explain it please?
0
 
LVL 7

Expert Comment

by:No More
ID: 41894314
Share permission are opening valve for NTFS permissions , if you have share permissions read and NTFS permissions for example : full control the user will get only read and execute NTFS permissions
0
 
LVL 7

Expert Comment

by:No More
ID: 41894316
0
 

Author Comment

by:jskfan
ID: 41894318
Good explanation David.
So at the Share level, does it matter if I give Change or Full ?
I know with Full at the Folder level, user can take ownership of the folder, but I am not sure at the Share level
0
 
LVL 78

Assisted Solution

by:David Johnson, CD, MVP
David Johnson, CD, MVP earned 83 total points
ID: 41894319
remember the most restrictive permission either the share or ntfs permission takes precedence
0
Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

 
LVL 7

Expert Comment

by:No More
ID: 41894321
Most of IT guys would use share permission: everyone : full control and then limit and control rest with NTFS permissions, but you have different options
0
 

Author Comment

by:jskfan
ID: 41894333
Thank you..

Regarding Access Base Enumeration...is this Windows 2012 Feature only ?
0
 
LVL 7

Expert Comment

by:No More
ID: 41894335
I think it was possible since 2003 and from 2008 up for 100%
0
 
LVL 22

Assisted Solution

by:yo_bee
yo_bee earned 83 total points
ID: 41894342
It was an addin that needed to be install on 2003 and part to 2008 and newer.
http://www.microsoft.com/downloads/details.aspx?FamilyID=04a563d9-78d9-4342-a485-b030ac442084&DisplayLang=en
0
 

Author Closing Comment

by:jskfan
ID: 41894398
Thank you for your help Guys
0
 
LVL 22

Expert Comment

by:yo_bee
ID: 41894399
Just remember deny rights will trump any allow rights
0
 
LVL 53

Expert Comment

by:McKnife
ID: 41894424
About share permissions: Everyone modify. Don't use everyone: Full.
"the most restrictive takes precedence" - not wrong, but it has exceptions. "deny will trump allow" - same. Has exceptions, see https://www.experts-exchange.com/questions/22108365/NTFS-and-share-permissions-I-found-a-difference-where-there-should-not-be-any.html
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

You may have a outside contractor who comes in once a week or seasonal to do some work in your office but you only want to give him access to the programs and files he needs and keep privet all other documents and programs, can you do this on a loca…
In this article, I am going to show you how to simulate a multi-site Lab environment on a single Hyper-V host. I use this method successfully in my own lab to simulate three fully routed global AD Sites on a Windows 10 Hyper-V host.
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

929 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now