Solved

Folder NTFS Permissions

Posted on 2016-11-19
14
126 Views
Last Modified: 2016-11-19
I posted this question.
https://www.experts-exchange.com/questions/28984180/Windows-Share-Security-permissions.html
Hard Part of it is Resolved.

Now on the Subfolders (Marketing , Sales)
I have added Security groups Marketing to Marketing folder and gave it Modify permissions
I have added Security groups Sales to Sales folder and gave it Modify permissions

However, I logged in to a computer as member of Marketing group, when I open for instance Marketing folder and
try to create a folder or text file inside of it I get a message: "You need permission to perform this Action"

Any idea of what I am missing?

Thank you
0
Comment
Question by:jskfan
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 4
  • 2
  • +3
14 Comments
 
LVL 7

Accepted Solution

by:
No More earned 251 total points
ID: 41894298
check share permissions
0
 
LVL 16

Assisted Solution

by:Dirk Mare
Dirk Mare earned 83 total points
ID: 41894307
Make sure the Marketing and Sales folders are not inheriting the permissions from the parent folder.

DirkMare
0
 

Author Comment

by:jskfan
ID: 41894310
Cannot understand

Company (Share) : Advanced Sharing I added Authenticated Users :Read permission
How does this impact the Subfolders like Marketing and Sales ?

By the Way, Thank you David, after I saw your suggestion, I gave Authenticated users Change permission on Advanced Sharing at the Company Share level,  and managed to creatd a folder under Marketing..how do you explain it please?
0
Use Case: Protecting a Hybrid Cloud Infrastructure

Microsoft Azure is rapidly becoming the norm in dynamic IT environments. This document describes the challenges that organizations face when protecting data in a hybrid cloud IT environment and presents a use case to demonstrate how Acronis Backup protects all data.

 
LVL 7

Expert Comment

by:No More
ID: 41894314
Share permission are opening valve for NTFS permissions , if you have share permissions read and NTFS permissions for example : full control the user will get only read and execute NTFS permissions
0
 
LVL 7

Expert Comment

by:No More
ID: 41894316
0
 

Author Comment

by:jskfan
ID: 41894318
Good explanation David.
So at the Share level, does it matter if I give Change or Full ?
I know with Full at the Folder level, user can take ownership of the folder, but I am not sure at the Share level
0
 
LVL 81

Assisted Solution

by:David Johnson, CD, MVP
David Johnson, CD, MVP earned 83 total points
ID: 41894319
remember the most restrictive permission either the share or ntfs permission takes precedence
0
 
LVL 7

Expert Comment

by:No More
ID: 41894321
Most of IT guys would use share permission: everyone : full control and then limit and control rest with NTFS permissions, but you have different options
0
 

Author Comment

by:jskfan
ID: 41894333
Thank you..

Regarding Access Base Enumeration...is this Windows 2012 Feature only ?
0
 
LVL 7

Expert Comment

by:No More
ID: 41894335
I think it was possible since 2003 and from 2008 up for 100%
0
 
LVL 23

Assisted Solution

by:yo_bee
yo_bee earned 83 total points
ID: 41894342
It was an addin that needed to be install on 2003 and part to 2008 and newer.
http://www.microsoft.com/downloads/details.aspx?FamilyID=04a563d9-78d9-4342-a485-b030ac442084&DisplayLang=en
0
 

Author Closing Comment

by:jskfan
ID: 41894398
Thank you for your help Guys
0
 
LVL 23

Expert Comment

by:yo_bee
ID: 41894399
Just remember deny rights will trump any allow rights
0
 
LVL 54

Expert Comment

by:McKnife
ID: 41894424
About share permissions: Everyone modify. Don't use everyone: Full.
"the most restrictive takes precedence" - not wrong, but it has exceptions. "deny will trump allow" - same. Has exceptions, see https://www.experts-exchange.com/questions/22108365/NTFS-and-share-permissions-I-found-a-difference-where-there-should-not-be-any.html
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Ransomware continues to grow in reach and sophistication, putting data everywhere at risk. Learn how to avoid being caught in its sinister clutches with these 11 key tips.
I was prompted to write this article after the recent World-Wide Ransomware outbreak. For years now, System Administrators around the world have used the excuse of "Waiting a Bit" before applying Security Patch Updates. This type of reasoning to me …
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question