File share access

We have a file share configured on a windows 2012 server. Modify access is granted to a group. For some reason only half the people in the group can write to the share. I have tried removing and adding the affected users to the group. I have tried adding one user with modify permissions to the share  and still no good. I tried adding my to the group and have the same write issue even though other user in the same group can modify. The server is windows 2012 and the users are using windows 7
InSearchOfAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Robert OrnelasVP Operations at Cook's ComputerCommented:
Check to see if inheritance is enabled on the share if it is disable it.
share properties, security, advanced
0
yo_beeDirector of Information TechnologyCommented:
Are there any deny access checked.  Denied trumps access.
0
NVITEnd-user supportCommented:
Have you tried having affected users logoff then logon?
2
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

gilnovSystems AdministratorCommented:
Take one of the users who is able to access the share out of the group and see if they can still access it. If so, those users are getting access some way other than the group. Look for common group memberships among the two groups (i.e. those with access and those without).

Also, check to see if there are any restrictions on the NTFS side.
1
Hello ThereSystem AdministratorCommented:
Check out if there is a conflict between user and group permissions.
0
Derek SouterITO Svc Delivery Cons IIICommented:
you need to check both NTFS permissions to the folder, and the share permissions

access is via a combination of the permissions
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Shaun VermaakTechnical Specialist IVCommented:
For some reason only half the people in the group can write to the share.
Did users log off and back on after adding them to group
0
InSearchOfAuthor Commented:
Thanks for the suggestions.
1. I would imagine that Inheritance would affect all the users in the group.
2. Affected users have logged on and on.
3. I tried taking one of the users who had access, out of the group and they did not have access.
0
yo_beeDirector of Information TechnologyCommented:
did you verify if there is any deny right?
0
NVITEnd-user supportCommented:

3. I tried taking one of the users who had access, out of the group and they did not have access

1. Put user into exact same group(s) and if needed, give explicit rights, as a user that works.
2. Remove user from one group. Logoff. Login. Verify.
3. Repeat step 2.
0
InSearchOfAuthor Commented:
Access to the share is through an AD group. I disabled inheritance and still the same problem.
0
yo_beeDirector of Information TechnologyCommented:
@insearchof

Still never confirmed if Deny was selected at all?
0
Hello ThereSystem AdministratorCommented:
Remove all users and groups from one (test) folder. Then reassign the permission back. What will happen?
Do not use DENY rule.
Block inheritance from parent user and enforce inheritance to child folder/files.
Make sure you apply it for Folder, subfolders and files!!!
0
InSearchOfAuthor Commented:
If modify is set for the group, where would I check for the deny?
I did add myself to the share and not group. I did block inheritance from the parent and enforced to folders and sub folder and filed
0
Hello ThereSystem AdministratorCommented:
As I said:
Remove all users and groups (except administrator and system) from one (test) folder. Then reassign the permission back. What will happen?
Do not use DENY rule.
Block inheritance from parent user and enforce inheritance to child folder/files.
Make sure you apply it for Folder, subfolders and files!!!

permission.png
0
Derek SouterITO Svc Delivery Cons IIICommented:
I repeat - have you checked the NTFS permissions to the shared folder?     they might have one group to provide access to the share, and different groups to provide read/write NTFS permissions (it used to be best practice to use different groups for NTFS/Share permissions)
0
Naveen SharmaCommented:
Seems like permission issue and as above suggested when you make a permission change the users need to logout and log back in for the changes to take effect.

Also check if the permissions inheriting. If so you can stop this by clicking Advanced on the Security tab and unchecking the box for inheritance.

Go to the security -> advanced -> effective permissions on a file and see what that tells you.

Else, check this permission analysis solution to evaluates the current effective permissions after calculating the NTFS permissions and Share permissions through which you can see the exact current permission for any user on any shared file or folder.
0
InSearchOfAuthor Commented:
When I look at "Effective Access"  for one of the affected users,  it has a RED X under "Permission" for create files/write data. If I scroll over it has "Share" Under "Access Limited By". When I look at a user that does not have a problem, I see she has a green check mark. So even though they are in the same group they have different levels of access. I see what you have been saying. So....wher can I change it?
0
yo_beeDirector of Information TechnologyCommented:
Can you post a screenshot? This may help all of us understand what you are looking at.
0
gilnovSystems AdministratorCommented:
Get permissions on the folder and click the "Security" tab. Share permissions are distinct from NTFS permissions but they interact. The rule to remember here is when share permissions conflict with NTFS permissions, the most restrictive wins (i.e. Deny will trump Allow).
0
InSearchOfAuthor Commented:
Here are two screen shots. One from a working user and one from a non working user. Both are in the same group
Working_User.png
Non_Working_User.png
0
gilnovSystems AdministratorCommented:
See how it says "Share, File Permissions" on the user who has write access but only says "Share" on the one without? In this context, file permissions refers to NTFS. Right-click the folder, select "Properties" then click the security tab. Look in this area and figure out what is different between the users with access and those without.
1
yo_beeDirector of Information TechnologyCommented:
Here is a screenshot to help what Gil is stating.
NTFS.png
0
InSearchOfAuthor Commented:
Thanks for the help. Much appreciated.
0
gilnovSystems AdministratorCommented:
So did you solve the issue? If so, please elaborate and assign points as appropriate.
0
InSearchOfAuthor Commented:
Well, When I looked at the share tab under effective permissions I do not see the folder that they need to access. To get it to work I had to add the group further up the folder hierarchy. I need to change this because now they have access to folders they shouldn't
0
InSearchOfAuthor Commented:
OK. I got it to work the way it should now. I had to give permission to the group further up the folder hierarchy then remove it after replacing permissions on child object folders, sub folders, and files. Thank you all for steering me in the right direction.
0
Hello ThereSystem AdministratorCommented:
Please mark all helpful post and close this question.
1
yo_beeDirector of Information TechnologyCommented:
so what was the cause?
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows OS

From novice to tech pro — start learning today.