File share access

We have a file share configured on a windows 2012 server. Modify access is granted to a group. For some reason only half the people in the group can write to the share. I have tried removing and adding the affected users to the group. I have tried adding one user with modify permissions to the share  and still no good. I tried adding my to the group and have the same write issue even though other user in the same group can modify. The server is windows 2012 and the users are using windows 7
InSearchOfAsked:
Who is Participating?
 
Derek SouterConnect With a Mentor ITO Svc Delivery Cons IIICommented:
you need to check both NTFS permissions to the folder, and the share permissions

access is via a combination of the permissions
0
 
Robert OrnelasVP Operations at Cook's ComputerCommented:
Check to see if inheritance is enabled on the share if it is disable it.
share properties, security, advanced
0
 
yo_beeDirector of Information TechnologyCommented:
Are there any deny access checked.  Denied trumps access.
0
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

 
NVITCommented:
Have you tried having affected users logoff then logon?
1
 
gilnovSystems AdministratorCommented:
Take one of the users who is able to access the share out of the group and see if they can still access it. If so, those users are getting access some way other than the group. Look for common group memberships among the two groups (i.e. those with access and those without).

Also, check to see if there are any restrictions on the NTFS side.
1
 
Hello ThereSystem AdministratorCommented:
Check out if there is a conflict between user and group permissions.
0
 
Shaun VermaakTechnical Specialist/DeveloperCommented:
For some reason only half the people in the group can write to the share.
Did users log off and back on after adding them to group
0
 
InSearchOfAuthor Commented:
Thanks for the suggestions.
1. I would imagine that Inheritance would affect all the users in the group.
2. Affected users have logged on and on.
3. I tried taking one of the users who had access, out of the group and they did not have access.
0
 
yo_beeDirector of Information TechnologyCommented:
did you verify if there is any deny right?
0
 
NVITCommented:

3. I tried taking one of the users who had access, out of the group and they did not have access

1. Put user into exact same group(s) and if needed, give explicit rights, as a user that works.
2. Remove user from one group. Logoff. Login. Verify.
3. Repeat step 2.
0
 
InSearchOfAuthor Commented:
Access to the share is through an AD group. I disabled inheritance and still the same problem.
0
 
yo_beeDirector of Information TechnologyCommented:
@insearchof

Still never confirmed if Deny was selected at all?
0
 
Hello ThereSystem AdministratorCommented:
Remove all users and groups from one (test) folder. Then reassign the permission back. What will happen?
Do not use DENY rule.
Block inheritance from parent user and enforce inheritance to child folder/files.
Make sure you apply it for Folder, subfolders and files!!!
0
 
InSearchOfAuthor Commented:
If modify is set for the group, where would I check for the deny?
I did add myself to the share and not group. I did block inheritance from the parent and enforced to folders and sub folder and filed
0
 
Hello ThereConnect With a Mentor System AdministratorCommented:
As I said:
Remove all users and groups (except administrator and system) from one (test) folder. Then reassign the permission back. What will happen?
Do not use DENY rule.
Block inheritance from parent user and enforce inheritance to child folder/files.
Make sure you apply it for Folder, subfolders and files!!!

permission.png
0
 
Derek SouterConnect With a Mentor ITO Svc Delivery Cons IIICommented:
I repeat - have you checked the NTFS permissions to the shared folder?     they might have one group to provide access to the share, and different groups to provide read/write NTFS permissions (it used to be best practice to use different groups for NTFS/Share permissions)
0
 
Naveen SharmaConnect With a Mentor Commented:
Seems like permission issue and as above suggested when you make a permission change the users need to logout and log back in for the changes to take effect.

Also check if the permissions inheriting. If so you can stop this by clicking Advanced on the Security tab and unchecking the box for inheritance.

Go to the security -> advanced -> effective permissions on a file and see what that tells you.

Else, check this permission analysis solution to evaluates the current effective permissions after calculating the NTFS permissions and Share permissions through which you can see the exact current permission for any user on any shared file or folder.
0
 
InSearchOfAuthor Commented:
When I look at "Effective Access"  for one of the affected users,  it has a RED X under "Permission" for create files/write data. If I scroll over it has "Share" Under "Access Limited By". When I look at a user that does not have a problem, I see she has a green check mark. So even though they are in the same group they have different levels of access. I see what you have been saying. So....wher can I change it?
0
 
yo_beeConnect With a Mentor Director of Information TechnologyCommented:
Can you post a screenshot? This may help all of us understand what you are looking at.
0
 
gilnovConnect With a Mentor Systems AdministratorCommented:
Get permissions on the folder and click the "Security" tab. Share permissions are distinct from NTFS permissions but they interact. The rule to remember here is when share permissions conflict with NTFS permissions, the most restrictive wins (i.e. Deny will trump Allow).
0
 
InSearchOfAuthor Commented:
Here are two screen shots. One from a working user and one from a non working user. Both are in the same group
Working_User.png
Non_Working_User.png
0
 
gilnovSystems AdministratorCommented:
See how it says "Share, File Permissions" on the user who has write access but only says "Share" on the one without? In this context, file permissions refers to NTFS. Right-click the folder, select "Properties" then click the security tab. Look in this area and figure out what is different between the users with access and those without.
1
 
yo_beeDirector of Information TechnologyCommented:
Here is a screenshot to help what Gil is stating.
NTFS.png
0
 
InSearchOfAuthor Commented:
Thanks for the help. Much appreciated.
0
 
gilnovSystems AdministratorCommented:
So did you solve the issue? If so, please elaborate and assign points as appropriate.
0
 
InSearchOfAuthor Commented:
Well, When I looked at the share tab under effective permissions I do not see the folder that they need to access. To get it to work I had to add the group further up the folder hierarchy. I need to change this because now they have access to folders they shouldn't
0
 
InSearchOfAuthor Commented:
OK. I got it to work the way it should now. I had to give permission to the group further up the folder hierarchy then remove it after replacing permissions on child object folders, sub folders, and files. Thank you all for steering me in the right direction.
0
 
Hello ThereSystem AdministratorCommented:
Please mark all helpful post and close this question.
1
 
yo_beeDirector of Information TechnologyCommented:
so what was the cause?
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.