Guest biff Posted October 17, 2008 Posted October 17, 2008 i have added username into Users folder I have right clicked folder on server and added user on security tab with write and modify permissions. I have right clicked folder and shared folder with share name and given user share permissions of change and read. User still cannot access folder/files or map to share. The folder we are mapping to is actually about 3 folders down from the root. I did not give user access to root folder. Do I need to?
Guest James Yeomans BSc, MCSE Posted October 17, 2008 Posted October 17, 2008 RE: what steps are involved in allowing Active Directory folder access no they dont need permissions on the root if the folder in question is shared itself. are you definitely trying to map straight to the folder in question and not the root and then drilling down to it? James. -- James Yeomans, BSc, MCSE Ask me directly at: http://www.justaskjames.co.uk "biff" wrote: > i have added username into Users folder > > I have right clicked folder on server and added user on security tab with > write and modify permissions. > > I have right clicked folder and shared folder with share name and given user > share permissions of change and read. > > User still cannot access folder/files or map to share. The folder we are > mapping to is actually about 3 folders down from the root. I did not give > user access to root folder. Do I need to?
Guest biff Posted October 17, 2008 Posted October 17, 2008 RE: what steps are involved in allowing Active Directory folder ac RE: what steps are involved in allowing Active Directory folder ac James possibly you may have solved the problem. Consider a server name "fox" Consider a directory structure that is 3 levels with root folder called "top", subfolder within top called "middle", and subfolder within middle called "bottom" The users was only given access to folder "bottom" When we mapped to the drive we used: "net use \\fox\top\middle\bottom" Maybe we should have used "net use \\fox\bottom" instead? I assume this same logic would apply when this user is sent hyperlinks? If person A with top access sends a hyperlink to person B who only has bottom access and this hyperlink specifies \\fox\top\middle\bottom then person B could not click the hyperlink even though they have access to bottom. "James Yeomans BSc, MCSE" wrote: > no they dont need permissions on the root if the folder in question is shared > itself. are you definitely trying to map straight to the folder in question > and not the root and then drilling down to it? > James. > -- > James Yeomans, BSc, MCSE > Ask me directly at: http://www.justaskjames.co.uk > > > "biff" wrote: > > > i have added username into Users folder > > > > I have right clicked folder on server and added user on security tab with > > write and modify permissions. > > > > I have right clicked folder and shared folder with share name and given user > > share permissions of change and read. > > > > User still cannot access folder/files or map to share. The folder we are > > mapping to is actually about 3 folders down from the root. I did not give > > user access to root folder. Do I need to?
Guest James Yeomans BSc, MCSE Posted October 17, 2008 Posted October 17, 2008 RE: what steps are involved in allowing Active Directory folder ac RE: what steps are involved in allowing Active Directory folder ac Yes i think that is the problem. If you map to \\server\top\middle\bottom........ you are effectively mapping to a shared folder called top and then just sub folders middle and bottom below it. When mapping to a shared folder the more restrictive of the shared folder permissions and the NTFS file permissions apply. In this case if they only have read share permissions on top folder then they will only be able to read through the whole structure. You need to map to \\server\bottom instead, then the share permissions on bottom of read and modify will be applied. James. -- James Yeomans, BSc, MCSE Ask me directly at: http://www.justaskjames.co.uk "biff" wrote: > James possibly you may have solved the problem. Consider a server name "fox" > > Consider a directory structure that is 3 levels with root folder called > "top", subfolder within top called "middle", and subfolder within middle > called "bottom" > > The users was only given access to folder "bottom" > > When we mapped to the drive we used: > > "net use \\fox\top\middle\bottom" > > Maybe we should have used "net use \\fox\bottom" instead? > > I assume this same logic would apply when this user is sent hyperlinks? If > person A with top access sends a hyperlink to person B who only has bottom > access and this hyperlink specifies \\fox\top\middle\bottom then person B > could not click the hyperlink even though they have access to bottom. > > "James Yeomans BSc, MCSE" wrote: > > > no they dont need permissions on the root if the folder in question is shared > > itself. are you definitely trying to map straight to the folder in question > > and not the root and then drilling down to it? > > James. > > -- > > James Yeomans, BSc, MCSE > > Ask me directly at: http://www.justaskjames.co.uk > > > > > > "biff" wrote: > > > > > i have added username into Users folder > > > > > > I have right clicked folder on server and added user on security tab with > > > write and modify permissions. > > > > > > I have right clicked folder and shared folder with share name and given user > > > share permissions of change and read. > > > > > > User still cannot access folder/files or map to share. The folder we are > > > mapping to is actually about 3 folders down from the root. I did not give > > > user access to root folder. Do I need to?
Guest biff Posted October 17, 2008 Posted October 17, 2008 RE: what steps are involved in allowing Active Directory folder ac RE: what steps are involved in allowing Active Directory folder ac OK thanks. "James Yeomans BSc, MCSE" wrote: > Yes i think that is the problem. If you map to > \\server\top\middle\bottom........ > you are effectively mapping to a shared folder called top and then just sub > folders middle and bottom below it. When mapping to a shared folder the more > restrictive of the shared folder permissions and the NTFS file permissions > apply. In this case if they only have read share permissions on top folder > then they will only be able to read through the whole structure. You need to > map to \\server\bottom instead, then the share permissions on bottom of read > and modify will be applied. > James. > -- > James Yeomans, BSc, MCSE > Ask me directly at: http://www.justaskjames.co.uk > > > "biff" wrote: > > > James possibly you may have solved the problem. Consider a server name "fox" > > > > Consider a directory structure that is 3 levels with root folder called > > "top", subfolder within top called "middle", and subfolder within middle > > called "bottom" > > > > The users was only given access to folder "bottom" > > > > When we mapped to the drive we used: > > > > "net use \\fox\top\middle\bottom" > > > > Maybe we should have used "net use \\fox\bottom" instead? > > > > I assume this same logic would apply when this user is sent hyperlinks? If > > person A with top access sends a hyperlink to person B who only has bottom > > access and this hyperlink specifies \\fox\top\middle\bottom then person B > > could not click the hyperlink even though they have access to bottom. > > > > "James Yeomans BSc, MCSE" wrote: > > > > > no they dont need permissions on the root if the folder in question is shared > > > itself. are you definitely trying to map straight to the folder in question > > > and not the root and then drilling down to it? > > > James. > > > -- > > > James Yeomans, BSc, MCSE > > > Ask me directly at: http://www.justaskjames.co.uk > > > > > > > > > "biff" wrote: > > > > > > > i have added username into Users folder > > > > > > > > I have right clicked folder on server and added user on security tab with > > > > write and modify permissions. > > > > > > > > I have right clicked folder and shared folder with share name and given user > > > > share permissions of change and read. > > > > > > > > User still cannot access folder/files or map to share. The folder we are > > > > mapping to is actually about 3 folders down from the root. I did not give > > > > user access to root folder. Do I need to?
Recommended Posts