Share/NTFS Permissions - grant more rights further down the tree

[Guest Tim Pring]

Can someone please assist to help me achieve this?

I have a folder structure similar to this

-\Shared\Data1\Data2

I have 2 groups of people

Everybody

Admins

I need to achieve the following permissions to these folders for these groups

Data1 - Everybody=R; Admins=C

Data2 - Everybody=C; Admins=C

 

Now, I can easily achieve rights for Everybody by granting 'C' permissions

to 'Share' for the 'Everyone' group; assigning 'R' perms to 'Data1' for

'Everyone and 'C' perms to 'Data2'.

 

And for Admins, I have granted 'C' perms to the 'Share' for the 'Admins'

group; assigned 'C' perms to both 'Data1' and 'Data2' for 'Admins'.

 

Testing shows that the permissions for Everybody works as intended, but the

permissions for Admin follow the security of Everybody and they have only 'R'

perms to 'Data1'.

 

Now I suspect that this is to do with the fact that Admins are members of

both the 'Everyone' and 'Admins' groups. I'd appreciate confirmation of this

from someone who knows for sure.

 

I'd also appreciate any suggestions you may have for how I can achieve the

above.

[Guest Anthony [MVP]]

Re: Share/NTFS Permissions - grant more rights further down the tree

 

Tim,

That should be quite simple:

(Share permissions on folder "Shared": Everyone F or C)

Shared (NTFS): Everyone R Admins C

Data2 (NTFS): Everyone C, Admins C

Just make sure that the folders are set to inherit (by default they will be)

and reset permissions first to remove any misconfig,

Anthony,

http://www.airdesk.co.uk

 

 

"Tim Pring" <TimPring@discussions.microsoft.com> wrote in message

news:2D18115E-1455-456C-924F-8C45A9733935@microsoft.com...

> Can someone please assist to help me achieve this?

> I have a folder structure similar to this

> -\Shared\Data1\Data2

> I have 2 groups of people

> Everybody

> Admins

> I need to achieve the following permissions to these folders for these

> groups

> Data1 - Everybody=R; Admins=C

> Data2 - Everybody=C; Admins=C

>

> Now, I can easily achieve rights for Everybody by granting 'C' permissions

> to 'Share' for the 'Everyone' group; assigning 'R' perms to 'Data1' for

> 'Everyone and 'C' perms to 'Data2'.

>

> And for Admins, I have granted 'C' perms to the 'Share' for the 'Admins'

> group; assigned 'C' perms to both 'Data1' and 'Data2' for 'Admins'.

>

> Testing shows that the permissions for Everybody works as intended, but

> the

> permissions for Admin follow the security of Everybody and they have only

> 'R'

> perms to 'Data1'.

>

> Now I suspect that this is to do with the fact that Admins are members of

> both the 'Everyone' and 'Admins' groups. I'd appreciate confirmation of

> this

> from someone who knows for sure.

>

> I'd also appreciate any suggestions you may have for how I can achieve the

> above.