• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 161
  • Last Modified:

Folder NTFS Permissions

I posted this question.
https://www.experts-exchange.com/questions/28984180/Windows-Share-Security-permissions.html
Hard Part of it is Resolved.

Now on the Subfolders (Marketing , Sales)
I have added Security groups Marketing to Marketing folder and gave it Modify permissions
I have added Security groups Sales to Sales folder and gave it Modify permissions

However, I logged in to a computer as member of Marketing group, when I open for instance Marketing folder and
try to create a folder or text file inside of it I get a message: "You need permission to perform this Action"

Any idea of what I am missing?

Thank you
0
jskfan
Asked:
jskfan
  • 5
  • 4
  • 2
  • +3
4 Solutions
 
No MoreCommented:
check share permissions
0
 
Dirk MareSystems Engineer (Acting IT Manager)Commented:
Make sure the Marketing and Sales folders are not inheriting the permissions from the parent folder.

DirkMare
0
 
jskfanAuthor Commented:
Cannot understand

Company (Share) : Advanced Sharing I added Authenticated Users :Read permission
How does this impact the Subfolders like Marketing and Sales ?

By the Way, Thank you David, after I saw your suggestion, I gave Authenticated users Change permission on Advanced Sharing at the Company Share level,  and managed to creatd a folder under Marketing..how do you explain it please?
0
Managing Security & Risk at the Speed of Business

Gartner Research VP, Neil McDonald & AlgoSec CTO, Prof. Avishai Wool, discuss the business-driven approach to automated security policy management, its benefits and how to align security policy management with business processes to address today's security challenges.

 
No MoreCommented:
Share permission are opening valve for NTFS permissions , if you have share permissions read and NTFS permissions for example : full control the user will get only read and execute NTFS permissions
0
 
No MoreCommented:
0
 
jskfanAuthor Commented:
Good explanation David.
So at the Share level, does it matter if I give Change or Full ?
I know with Full at the Folder level, user can take ownership of the folder, but I am not sure at the Share level
0
 
David Johnson, CD, MVPOwnerCommented:
remember the most restrictive permission either the share or ntfs permission takes precedence
0
 
No MoreCommented:
Most of IT guys would use share permission: everyone : full control and then limit and control rest with NTFS permissions, but you have different options
0
 
jskfanAuthor Commented:
Thank you..

Regarding Access Base Enumeration...is this Windows 2012 Feature only ?
0
 
No MoreCommented:
I think it was possible since 2003 and from 2008 up for 100%
0
 
yo_beeDirector of ITCommented:
It was an addin that needed to be install on 2003 and part to 2008 and newer.
http://www.microsoft.com/downloads/details.aspx?FamilyID=04a563d9-78d9-4342-a485-b030ac442084&DisplayLang=en
0
 
jskfanAuthor Commented:
Thank you for your help Guys
0
 
yo_beeDirector of ITCommented:
Just remember deny rights will trump any allow rights
0
 
McKnifeCommented:
About share permissions: Everyone modify. Don't use everyone: Full.
"the most restrictive takes precedence" - not wrong, but it has exceptions. "deny will trump allow" - same. Has exceptions, see https://www.experts-exchange.com/questions/22108365/NTFS-and-share-permissions-I-found-a-difference-where-there-should-not-be-any.html
0

Featured Post

Managing Security & Risk at the Speed of Business

Gartner Research VP, Neil McDonald & AlgoSec CTO, Prof. Avishai Wool, discuss the business-driven approach to automated security policy management, its benefits and how to align security policy management with business processes to address today's security challenges.

  • 5
  • 4
  • 2
  • +3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now