Jump to content

Stange share rights problems

Guest MarcusB

By Guest MarcusB
in Windows 2003 Server

 Share

Recommended Posts

Guest MarcusB

Guest MarcusB

Posted
Posted

We got very strange right problems on our server.

We have Common shares and we have enabled all rights for everyone on the

the share. Than we are giving proper security rights to groups.

Managers groups have write and read rights but Staff group have only

read rights.

When the staff login than can also write to the share. Why? What happen?

 

 

Marcus

  • Replies 15
  • Created
  • Last Reply

Popular Days

Popular Days

Guest Meinolf Weber

Guest Meinolf Weber

Posted
Posted

Re: Stange share rights problems

 

Hello MarcusB,

 

What groups are set under share permissions with which rights? And also post

the the permissions form one problem folder for all groups added there.

 

Best regards

 

Meinolf Weber

Disclaimer: This posting is provided "AS IS" with no warranties, and confers

no rights.

** Please do NOT email, only reply to Newsgroups

** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> We got very strange right problems on our server.

> We have Common shares and we have enabled all rights for everyone on

> the

> the share. Than we are giving proper security rights to groups.

> Managers groups have write and read rights but Staff group have only

> read rights.

> When the staff login than can also write to the share. Why? What

> happen?

> Marcus

>

Guest MarcusB

Guest MarcusB

Posted
Posted

Re: Stange share rights problems

 

Under share permisions "everyone" have Full Control, change and read

permissions.

 

"Staff" group have in Security permission only read.

 

Thus staff should only have read permission. Which permision: Security

or Share take over?

 

/Marcus

 

 

 

Meinolf Weber wrote:

> Hello MarcusB,

>

> What groups are set under share permissions with which rights? And also

> post the the permissions form one problem folder for all groups added

> there.

>

> Best regards

>

> Meinolf Weber

> Disclaimer: This posting is provided "AS IS" with no warranties, and

> confers no rights.

> ** Please do NOT email, only reply to Newsgroups

> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

>

>> We got very strange right problems on our server.

>> We have Common shares and we have enabled all rights for everyone on

>> the

>> the share. Than we are giving proper security rights to groups.

>> Managers groups have write and read rights but Staff group have only

>> read rights.

>> When the staff login than can also write to the share. Why? What

>> happen?

>> Marcus

>>

>

>

Guest JohnB

Guest JohnB

Posted
Posted

Re: Stange share rights problems

 

Under the Security Tab > Advanced button, for NTFS settings, it will list

any group or individuals that have permissions and where they are inherited

from. Take a look at that to see if it explains where the Staff group is

getting their "write" rights.

 

 

"MarcusB" <marcusb@llunet.se> wrote in message

news:uMFox3rrIHA.4492@TK2MSFTNGP02.phx.gbl...

> We got very strange right problems on our server.

> We have Common shares and we have enabled all rights for everyone on the

> the share. Than we are giving proper security rights to groups.

> Managers groups have write and read rights but Staff group have only read

> rights.

> When the staff login than can also write to the share. Why? What happen?

>

>

> Marcus

Guest AllenM

Guest AllenM

Posted
Posted

Re: Stange share rights problems

 

You really need to be more specific and provide more details such as the

folder structure and most importantly the NTFS permissions on the parent

folder as well as the sub folder. Are you sure there are no duplicate

memberships for both Managers/Staff?

 

 

"MarcusB" <marcusb@llunet.se> wrote in message

news:uMFox3rrIHA.4492@TK2MSFTNGP02.phx.gbl...

> We got very strange right problems on our server.

> We have Common shares and we have enabled all rights for everyone on the

> the share. Than we are giving proper security rights to groups.

> Managers groups have write and read rights but Staff group have only read

> rights.

> When the staff login than can also write to the share. Why? What happen?

>

>

> Marcus

Guest MarcusB

Guest MarcusB

Posted
Posted

Re: Stange share rights problems

 

Under share permisions "everyone" have Full Control, change and read

permissions.

 

"Staff" group have in Security permission only read.

 

Thus staff should only have read permission and it have in the Security.

Which permision: Security or Share take over?

In my case it seems that Share permissions take over. How is it? It

should be that NTFS permission take over not oposit. Most restrictiv is

it not like that?

 

/Marcus

 

AllenM wrote:

> You really need to be more specific and provide more details such as the

> folder structure and most importantly the NTFS permissions on the parent

> folder as well as the sub folder. Are you sure there are no duplicate

> memberships for both Managers/Staff?

>

>

> "MarcusB" <marcusb@llunet.se> wrote in message

> news:uMFox3rrIHA.4492@TK2MSFTNGP02.phx.gbl...

>> We got very strange right problems on our server.

>> We have Common shares and we have enabled all rights for everyone on the

>> the share. Than we are giving proper security rights to groups.

>> Managers groups have write and read rights but Staff group have only read

>> rights.

>> When the staff login than can also write to the share. Why? What happen?

>>

>>

>> Marcus

>

>

Guest MarcusB

Guest MarcusB

Posted
Posted

Re: Stange share rights problems

 

According Microsoft:

When folders on NTFS volumes are shared, the effective permission of the

user will be the most restrictive of the NTFS and share permissions.

 

But it is not in my case:

Share permission: "Evereone" full rights

NTFS Permission : "Staff" read.

 

Effective permission are Staff full rights.

 

Why?

 

/Marcus

 

MarcusB wrote:

> Under share permisions "everyone" have Full Control, change and read

> permissions.

>

> "Staff" group have in Security permission only read.

>

> Thus staff should only have read permission and it have in the Security.

> Which permision: Security or Share take over?

> In my case it seems that Share permissions take over. How is it? It

> should be that NTFS permission take over not oposit. Most restrictiv is

> it not like that?

>

> /Marcus

>

> AllenM wrote:

>> You really need to be more specific and provide more details such as

>> the folder structure and most importantly the NTFS permissions on the

>> parent folder as well as the sub folder. Are you sure there are no

>> duplicate memberships for both Managers/Staff?

>>

>>

>> "MarcusB" <marcusb@llunet.se> wrote in message

>> news:uMFox3rrIHA.4492@TK2MSFTNGP02.phx.gbl...

>>> We got very strange right problems on our server.

>>> We have Common shares and we have enabled all rights for everyone on

>>> the the share. Than we are giving proper security rights to groups.

>>> Managers groups have write and read rights but Staff group have only

>>> read rights.

>>> When the staff login than can also write to the share. Why? What happen?

>>>

>>>

>>> Marcus

>>

>>

Guest AllenM

Guest AllenM

Posted
Posted

Re: Stange share rights problems

 

Share security is correct. Everyone should have "FULL". Here's how SHARE

permissions work in unison with NTFS permissions.

 

SHARE permissions will "superceed" NTFS folder and file permissions with the

"least" permissive access. Example: If you set EVERYONE with "READ" onyl on

the SHARE then it will not matter what NFTS permissions you give them they

will only have READ permissions. That said is the reason when you share a

folder you give EVERYONE-FULL.

Now NTFS permissions will override each other with the "most" permissive

access. Example. If user A belong to Group A-Modify as well as Group B-Read

only then they will receive the "most" permissive which is Modify.

 

Given all of this I'd like to see all of the groups as well as their

permissions on the folder in question.

 

 

"MarcusB" <marcusb@llunet.se> wrote in message

news:Oje8TqtrIHA.4492@TK2MSFTNGP02.phx.gbl...

> Under share permisions "everyone" have Full Control, change and read

> permissions.

>

> "Staff" group have in Security permission only read.

>

> Thus staff should only have read permission and it have in the Security.

> Which permision: Security or Share take over?

> In my case it seems that Share permissions take over. How is it? It should

> be that NTFS permission take over not oposit. Most restrictiv is it not

> like that?

>

> /Marcus

>

> AllenM wrote:

>> You really need to be more specific and provide more details such as the

>> folder structure and most importantly the NTFS permissions on the parent

>> folder as well as the sub folder. Are you sure there are no duplicate

>> memberships for both Managers/Staff?

>>

>>

>> "MarcusB" <marcusb@llunet.se> wrote in message

>> news:uMFox3rrIHA.4492@TK2MSFTNGP02.phx.gbl...

>>> We got very strange right problems on our server.

>>> We have Common shares and we have enabled all rights for everyone on the

>>> the share. Than we are giving proper security rights to groups.

>>> Managers groups have write and read rights but Staff group have only

>>> read rights.

>>> When the staff login than can also write to the share. Why? What happen?

>>>

>>>

>>> Marcus

>>

Guest JohnB

Guest JohnB

Posted
Posted

Re: Stange share rights problems

 

It is difficult, if not impossible, to help you further if you don't answer

the follow-up questions that you get here. Myself and AllenM asked about

parent folders and inherited permissions. If you answer those questions we

could probably help you further.

 

 

 

"MarcusB" <marcusb@llunet.se> wrote in message

news:Oje8TqtrIHA.4492@TK2MSFTNGP02.phx.gbl...

> Under share permisions "everyone" have Full Control, change and read

> permissions.

>

> "Staff" group have in Security permission only read.

>

> Thus staff should only have read permission and it have in the Security.

> Which permision: Security or Share take over?

> In my case it seems that Share permissions take over. How is it? It should

> be that NTFS permission take over not oposit. Most restrictiv is it not

> like that?

>

> /Marcus

>

> AllenM wrote:

>> You really need to be more specific and provide more details such as the

>> folder structure and most importantly the NTFS permissions on the parent

>> folder as well as the sub folder. Are you sure there are no duplicate

>> memberships for both Managers/Staff?

>>

>>

>> "MarcusB" <marcusb@llunet.se> wrote in message

>> news:uMFox3rrIHA.4492@TK2MSFTNGP02.phx.gbl...

>>> We got very strange right problems on our server.

>>> We have Common shares and we have enabled all rights for everyone on the

>>> the share. Than we are giving proper security rights to groups.

>>> Managers groups have write and read rights but Staff group have only

>>> read rights.

>>> When the staff login than can also write to the share. Why? What happen?

>>>

>>>

>>> Marcus

>>

Guest MarcusB

Guest MarcusB

Posted
Posted

Re: Strange share rights problems

 

Re: Strange share rights problems

 

The parent folder is disk "X:"

THere is in Security:

Administrators: FULL Control

Everyone :READ & Execute

SYSTEM : FULL Control

CREATOR OWNER

USERS : READ

 

The problematic folder is the folder under drive X and is called "confident"

 

THere is in Security:

Administrators: FULL Control

Everyone :READ & Execute

SYSTEM : FULL Control

CREATOR OWNER

USERS : READ

STAFF: READ

Managers: FULL Control

 

Share is:

Everyone: Full Control

 

 

Users who belongs to the STAFF belongs also to Domain Users.

 

STAFF and Managers are Universal groups in the domain.

 

 

To make sharing easier we gave "Everyone" Full rights and we wanted to

manage rioghts by NTFS but it is not working like it should. Shares

rights wins?

 

Can you help now?

 

/Marcus

 

 

 

JohnB wrote:

> It is difficult, if not impossible, to help you further if you don't answer

> the follow-up questions that you get here. Myself and AllenM asked about

> parent folders and inherited permissions. If you answer those questions we

> could probably help you further.

>

>

>

> "MarcusB" <marcusb@llunet.se> wrote in message

> news:Oje8TqtrIHA.4492@TK2MSFTNGP02.phx.gbl...

>> Under share permisions "everyone" have Full Control, change and read

>> permissions.

>>

>> "Staff" group have in Security permission only read.

>>

>> Thus staff should only have read permission and it have in the Security.

>> Which permision: Security or Share take over?

>> In my case it seems that Share permissions take over. How is it? It should

>> be that NTFS permission take over not oposit. Most restrictiv is it not

>> like that?

>>

>> /Marcus

>>

>> AllenM wrote:

>>> You really need to be more specific and provide more details such as the

>>> folder structure and most importantly the NTFS permissions on the parent

>>> folder as well as the sub folder. Are you sure there are no duplicate

>>> memberships for both Managers/Staff?

>>>

>>>

>>> "MarcusB" <marcusb@llunet.se> wrote in message

>>> news:uMFox3rrIHA.4492@TK2MSFTNGP02.phx.gbl...

>>>> We got very strange right problems on our server.

>>>> We have Common shares and we have enabled all rights for everyone on the

>>>> the share. Than we are giving proper security rights to groups.

>>>> Managers groups have write and read rights but Staff group have only

>>>> read rights.

>>>> When the staff login than can also write to the share. Why? What happen?

>>>>

>>>>

>>>> Marcus

>

Guest AllenM

Guest AllenM

Posted
Posted

Re: Strange share rights problems

 

Re: Strange share rights problems

 

No. SHARE rights only win if it is less permissive.(or most restricted as

other may say). from the looks of it it is a bit unorganized and messy but I

don't see anything in there that could allow "STAFF" the ability to wrtie to

the folder. You are sure all STAFF members can write to the folder? Is it

isolated to a single user who may be a memebr of Administrators and or

MANAGERS?

 

Here is what I would do.

 

1. First of all verify and confirm that the user who has the ability to

write to the sub folder is not a member of the Administrators or Managers

group.

2. Is the sub folder SHARED also? What are the permissions there?

3. Turn off inheritance on the sub folders. Clean your NTFS folder

structure. No need for EVERYONE to be listed in an y sub folders.

 

Parent Folder

Administrators = FULL

SYSTEM = FULL

Everyone = List

 

Sub Folder - TURN OFF INHERITANCE AND COPY

Administrators = FULL

SYSTEM = FULL

Staff = Read

Managers = FULL

 

Also one more quick question. When you say the parent folder is X is that

the root?

 

 

 

"MarcusB" <marcusb@llunet.se> wrote in message

news:uJuoYHurIHA.1952@TK2MSFTNGP05.phx.gbl...

> The parent folder is disk "X:"

> THere is in Security:

> Administrators: FULL Control

> Everyone :READ & Execute

> SYSTEM : FULL Control

> CREATOR OWNER

> USERS : READ

>

> The problematic folder is the folder under drive X and is called

> "confident"

>

> THere is in Security:

> Administrators: FULL Control

> Everyone :READ & Execute

> SYSTEM : FULL Control

> CREATOR OWNER

> USERS : READ

> STAFF: READ

> Managers: FULL Control

>

> Share is:

> Everyone: Full Control

>

>

> Users who belongs to the STAFF belongs also to Domain Users.

>

> STAFF and Managers are Universal groups in the domain.

>

>

> To make sharing easier we gave "Everyone" Full rights and we wanted to

> manage rioghts by NTFS but it is not working like it should. Shares rights

> wins?

>

> Can you help now?

>

> /Marcus

>

>

>

> JohnB wrote:

>> It is difficult, if not impossible, to help you further if you don't

>> answer the follow-up questions that you get here. Myself and AllenM

>> asked about parent folders and inherited permissions. If you answer

>> those questions we could probably help you further.

>>

>>

>>

>> "MarcusB" <marcusb@llunet.se> wrote in message

>> news:Oje8TqtrIHA.4492@TK2MSFTNGP02.phx.gbl...

>>> Under share permisions "everyone" have Full Control, change and read

>>> permissions.

>>>

>>> "Staff" group have in Security permission only read.

>>>

>>> Thus staff should only have read permission and it have in the Security.

>>> Which permision: Security or Share take over?

>>> In my case it seems that Share permissions take over. How is it? It

>>> should be that NTFS permission take over not oposit. Most restrictiv is

>>> it not like that?

>>>

>>> /Marcus

>>>

>>> AllenM wrote:

>>>> You really need to be more specific and provide more details such as

>>>> the folder structure and most importantly the NTFS permissions on the

>>>> parent folder as well as the sub folder. Are you sure there are no

>>>> duplicate memberships for both Managers/Staff?

>>>>

>>>>

>>>> "MarcusB" <marcusb@llunet.se> wrote in message

>>>> news:uMFox3rrIHA.4492@TK2MSFTNGP02.phx.gbl...

>>>>> We got very strange right problems on our server.

>>>>> We have Common shares and we have enabled all rights for everyone on

>>>>> the the share. Than we are giving proper security rights to groups.

>>>>> Managers groups have write and read rights but Staff group have only

>>>>> read rights.

>>>>> When the staff login than can also write to the share. Why? What

>>>>> happen?

>>>>>

>>>>>

>>>>> Marcus

>>

Guest JohnB

Guest JohnB

Posted
Posted

Re: Strange share rights problems

 

Re: Strange share rights problems

 

Marcus,

The effective rights of the combination of Shared and NTFS permissions are

the most restrictive of the combination of the assigned rights.

And as you're saying, things aren't what they should be.

To get to the bottom of this, we need to know where Staff are getting their

permissions from.

 

Have you tested this with all users from the Staff Group?

 

Under the Security Tab > Advanced button - on the row for Staff, what does

it have under:

- the Inherited column?

- the Permission column?

 

 

 

 

 

"MarcusB" <marcusb@llunet.se> wrote in message

news:uJuoYHurIHA.1952@TK2MSFTNGP05.phx.gbl...

> The parent folder is disk "X:"

> THere is in Security:

> Administrators: FULL Control

> Everyone :READ & Execute

> SYSTEM : FULL Control

> CREATOR OWNER

> USERS : READ

>

> The problematic folder is the folder under drive X and is called

> "confident"

>

> THere is in Security:

> Administrators: FULL Control

> Everyone :READ & Execute

> SYSTEM : FULL Control

> CREATOR OWNER

> USERS : READ

> STAFF: READ

> Managers: FULL Control

>

> Share is:

> Everyone: Full Control

>

>

> Users who belongs to the STAFF belongs also to Domain Users.

>

> STAFF and Managers are Universal groups in the domain.

>

>

> To make sharing easier we gave "Everyone" Full rights and we wanted to

> manage rioghts by NTFS but it is not working like it should. Shares rights

> wins?

>

> Can you help now?

>

> /Marcus

>

>

>

> JohnB wrote:

>> It is difficult, if not impossible, to help you further if you don't

>> answer the follow-up questions that you get here. Myself and AllenM

>> asked about parent folders and inherited permissions. If you answer

>> those questions we could probably help you further.

>>

>>

>>

>> "MarcusB" <marcusb@llunet.se> wrote in message

>> news:Oje8TqtrIHA.4492@TK2MSFTNGP02.phx.gbl...

>>> Under share permisions "everyone" have Full Control, change and read

>>> permissions.

>>>

>>> "Staff" group have in Security permission only read.

>>>

>>> Thus staff should only have read permission and it have in the Security.

>>> Which permision: Security or Share take over?

>>> In my case it seems that Share permissions take over. How is it? It

>>> should be that NTFS permission take over not oposit. Most restrictiv is

>>> it not like that?

>>>

>>> /Marcus

>>>

>>> AllenM wrote:

>>>> You really need to be more specific and provide more details such as

>>>> the folder structure and most importantly the NTFS permissions on the

>>>> parent folder as well as the sub folder. Are you sure there are no

>>>> duplicate memberships for both Managers/Staff?

>>>>

>>>>

>>>> "MarcusB" <marcusb@llunet.se> wrote in message

>>>> news:uMFox3rrIHA.4492@TK2MSFTNGP02.phx.gbl...

>>>>> We got very strange right problems on our server.

>>>>> We have Common shares and we have enabled all rights for everyone on

>>>>> the the share. Than we are giving proper security rights to groups.

>>>>> Managers groups have write and read rights but Staff group have only

>>>>> read rights.

>>>>> When the staff login than can also write to the share. Why? What

>>>>> happen?

>>>>>

>>>>>

>>>>> Marcus

>>

Guest Meinolf Weber

Guest Meinolf Weber

Posted
Posted

Re: Strange share rights problems

 

Re: Strange share rights problems

 

Hello MarcusB,

 

Do not share the root drive, create a folder under the root, in your case

X, and share this folder, then start with confidential.

 

 

X drive

 

 

-----MyFolderstructure as Share

-----Administrators = F

-----SYSTEM = F

-----Authenticated users = F

 

 

-----------------Confidential

-----------------Administrators = F

-----------------SYSTEM = F

-----------------Staff = R&E

-----------------Managers = F

 

 

Best regards

 

Meinolf Weber

Disclaimer: This posting is provided "AS IS" with no warranties, and confers

no rights.

** Please do NOT email, only reply to Newsgroups

** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> The parent folder is disk "X:"

> THere is in Security:

> Administrators: FULL Control

> Everyone :READ & Execute

> SYSTEM : FULL Control

> CREATOR OWNER

> USERS : READ

> The problematic folder is the folder under drive X and is called

> "confident"

>

> THere is in Security:

> Administrators: FULL Control

> Everyone :READ & Execute

> SYSTEM : FULL Control

> CREATOR OWNER

> USERS : READ

> STAFF: READ

> Managers: FULL Control

> Share is:

> Everyone: Full Control

> Users who belongs to the STAFF belongs also to Domain Users.

>

> STAFF and Managers are Universal groups in the domain.

>

> To make sharing easier we gave "Everyone" Full rights and we wanted to

> manage rioghts by NTFS but it is not working like it should. Shares

> rights wins?

>

> Can you help now?

>

> /Marcus

>

> JohnB wrote:

>

>> It is difficult, if not impossible, to help you further if you don't

>> answer the follow-up questions that you get here. Myself and AllenM

>> asked about parent folders and inherited permissions. If you answer

>> those questions we could probably help you further.

>>

>> "MarcusB" <marcusb@llunet.se> wrote in message

>> news:Oje8TqtrIHA.4492@TK2MSFTNGP02.phx.gbl...

>>

>>> Under share permisions "everyone" have Full Control, change and read

>>> permissions.

>>>

>>> "Staff" group have in Security permission only read.

>>>

>>> Thus staff should only have read permission and it have in the

>>> Security.

>>> Which permision: Security or Share take over?

>>> In my case it seems that Share permissions take over. How is it? It

>>> should

>>> be that NTFS permission take over not oposit. Most restrictiv is it

>>> not

>>> like that?

>>> /Marcus

>>>

>>> AllenM wrote:

>>>

>>>> You really need to be more specific and provide more details such

>>>> as the folder structure and most importantly the NTFS permissions

>>>> on the parent folder as well as the sub folder. Are you sure there

>>>> are no duplicate memberships for both Managers/Staff?

>>>>

>>>> "MarcusB" <marcusb@llunet.se> wrote in message

>>>> news:uMFox3rrIHA.4492@TK2MSFTNGP02.phx.gbl...

>>>>

>>>>> We got very strange right problems on our server.

>>>>> We have Common shares and we have enabled all rights for everyone

>>>>> on the

>>>>> the share. Than we are giving proper security rights to groups.

>>>>> Managers groups have write and read rights but Staff group have

>>>>> only

>>>>> read rights.

>>>>> When the staff login than can also write to the share. Why? What

>>>>> happen?

>>>>> Marcus

>>>>>

Guest AllenM

Guest AllenM

Posted
Posted

Re: Strange share rights problems

 

Re: Strange share rights problems

 

I was curious about that also. See my last question in my last post.

 

"Meinolf Weber" <meiweb(nospam)@gmx.de> wrote in message

news:ff16fb669877d8ca7d11f3b83467@msnews.microsoft.com...

> Hello MarcusB,

>

> Do not share the root drive, create a folder under the root, in your case

> X, and share this folder, then start with confidential.

>

>

> X drive

>

>

> -----MyFolderstructure as Share

> -----Administrators = F

> -----SYSTEM = F

> -----Authenticated users = F

>

>

> -----------------Confidential

> -----------------Administrators = F

> -----------------SYSTEM = F

> -----------------Staff = R&E

> -----------------Managers = F

>

>

> Best regards

>

> Meinolf Weber

> Disclaimer: This posting is provided "AS IS" with no warranties, and

> confers no rights.

> ** Please do NOT email, only reply to Newsgroups

> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

>

>> The parent folder is disk "X:"

>> THere is in Security:

>> Administrators: FULL Control

>> Everyone :READ & Execute

>> SYSTEM : FULL Control

>> CREATOR OWNER

>> USERS : READ

>> The problematic folder is the folder under drive X and is called

>> "confident"

>>

>> THere is in Security:

>> Administrators: FULL Control

>> Everyone :READ & Execute

>> SYSTEM : FULL Control

>> CREATOR OWNER

>> USERS : READ

>> STAFF: READ

>> Managers: FULL Control

>> Share is:

>> Everyone: Full Control

>> Users who belongs to the STAFF belongs also to Domain Users.

>>

>> STAFF and Managers are Universal groups in the domain.

>>

>> To make sharing easier we gave "Everyone" Full rights and we wanted to

>> manage rioghts by NTFS but it is not working like it should. Shares

>> rights wins?

>>

>> Can you help now?

>>

>> /Marcus

>>

>> JohnB wrote:

>>

>>> It is difficult, if not impossible, to help you further if you don't

>>> answer the follow-up questions that you get here. Myself and AllenM

>>> asked about parent folders and inherited permissions. If you answer

>>> those questions we could probably help you further.

>>>

>>> "MarcusB" <marcusb@llunet.se> wrote in message

>>> news:Oje8TqtrIHA.4492@TK2MSFTNGP02.phx.gbl...

>>>

>>>> Under share permisions "everyone" have Full Control, change and read

>>>> permissions.

>>>>

>>>> "Staff" group have in Security permission only read.

>>>>

>>>> Thus staff should only have read permission and it have in the

>>>> Security.

>>>> Which permision: Security or Share take over?

>>>> In my case it seems that Share permissions take over. How is it? It

>>>> should

>>>> be that NTFS permission take over not oposit. Most restrictiv is it

>>>> not

>>>> like that?

>>>> /Marcus

>>>>

>>>> AllenM wrote:

>>>>

>>>>> You really need to be more specific and provide more details such

>>>>> as the folder structure and most importantly the NTFS permissions

>>>>> on the parent folder as well as the sub folder. Are you sure there

>>>>> are no duplicate memberships for both Managers/Staff?

>>>>>

>>>>> "MarcusB" <marcusb@llunet.se> wrote in message

>>>>> news:uMFox3rrIHA.4492@TK2MSFTNGP02.phx.gbl...

>>>>>

>>>>>> We got very strange right problems on our server.

>>>>>> We have Common shares and we have enabled all rights for everyone

>>>>>> on the

>>>>>> the share. Than we are giving proper security rights to groups.

>>>>>> Managers groups have write and read rights but Staff group have

>>>>>> only

>>>>>> read rights.

>>>>>> When the staff login than can also write to the share. Why? What

>>>>>> happen?

>>>>>> Marcus

>>>>>>

>

>

Guest Meinolf Weber

Guest Meinolf Weber

Posted
Posted

Re: Strange share rights problems

 

Re: Strange share rights problems

 

Hello MarcusB,

 

This part was not clear enough i think:

 

This rights are for the SHARE PERMISSIONS

 

-----MyFolderstructure as Share

-----Administrators = F

-----SYSTEM = F

-----Authenticated users = F

 

On the Folder itself

 

-----Administrators = F

-----SYSTEM = F

-----Authenticated users = List

 

 

Best regards

 

Meinolf Weber

Disclaimer: This posting is provided "AS IS" with no warranties, and confers

no rights.

** Please do NOT email, only reply to Newsgroups

** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> The parent folder is disk "X:"

> THere is in Security:

> Administrators: FULL Control

> Everyone :READ & Execute

> SYSTEM : FULL Control

> CREATOR OWNER

> USERS : READ

> The problematic folder is the folder under drive X and is called

> "confident"

>

> THere is in Security:

> Administrators: FULL Control

> Everyone :READ & Execute

> SYSTEM : FULL Control

> CREATOR OWNER

> USERS : READ

> STAFF: READ

> Managers: FULL Control

> Share is:

> Everyone: Full Control

> Users who belongs to the STAFF belongs also to Domain Users.

>

> STAFF and Managers are Universal groups in the domain.

>

> To make sharing easier we gave "Everyone" Full rights and we wanted to

> manage rioghts by NTFS but it is not working like it should. Shares

> rights wins?

>

> Can you help now?

>

> /Marcus

>

> JohnB wrote:

>

>> It is difficult, if not impossible, to help you further if you don't

>> answer the follow-up questions that you get here. Myself and AllenM

>> asked about parent folders and inherited permissions. If you answer

>> those questions we could probably help you further.

>>

>> "MarcusB" <marcusb@llunet.se> wrote in message

>> news:Oje8TqtrIHA.4492@TK2MSFTNGP02.phx.gbl...

>>

>>> Under share permisions "everyone" have Full Control, change and read

>>> permissions.

>>>

>>> "Staff" group have in Security permission only read.

>>>

>>> Thus staff should only have read permission and it have in the

>>> Security.

>>> Which permision: Security or Share take over?

>>> In my case it seems that Share permissions take over. How is it? It

>>> should

>>> be that NTFS permission take over not oposit. Most restrictiv is it

>>> not

>>> like that?

>>> /Marcus

>>>

>>> AllenM wrote:

>>>

>>>> You really need to be more specific and provide more details such

>>>> as the folder structure and most importantly the NTFS permissions

>>>> on the parent folder as well as the sub folder. Are you sure there

>>>> are no duplicate memberships for both Managers/Staff?

>>>>

>>>> "MarcusB" <marcusb@llunet.se> wrote in message

>>>> news:uMFox3rrIHA.4492@TK2MSFTNGP02.phx.gbl...

>>>>

>>>>> We got very strange right problems on our server.

>>>>> We have Common shares and we have enabled all rights for everyone

>>>>> on the

>>>>> the share. Than we are giving proper security rights to groups.

>>>>> Managers groups have write and read rights but Staff group have

>>>>> only

>>>>> read rights.

>>>>> When the staff login than can also write to the share. Why? What

>>>>> happen?

>>>>> Marcus

>>>>>

Guest MarcusB

Guest MarcusB

Posted
Posted

Re: Strange share rights problems

 

Re: Strange share rights problems

 

AllenM wrote:

> No. SHARE rights only win if it is less permissive.(or most restricted as

> other may say). from the looks of it it is a bit unorganized and messy but I

> don't see anything in there that could allow "STAFF" the ability to wrtie to

> the folder. You are sure all STAFF members can write to the folder? Is it

> isolated to a single user who may be a memebr of Administrators and or

> MANAGERS?

>

> Here is what I would do.

>

> 1. First of all verify and confirm that the user who has the ability to

> write to the sub folder is not a member of the Administrators or Managers

> group.

 

The Staff is not member of the Administrators or Managers

> 2. Is the sub folder SHARED also? What are the permissions there?

No subfolders shared. The only Confident folder is shared.

> 3. Turn off inheritance on the sub folders. Clean your NTFS folder

> structure. No need for EVERYONE to be listed in an y sub folders.

>

I turned off inheritance and after it everything started to work like it

should. Very strange. Staff did not have write right on the root.

 

 

/Marcus

> Parent Folder

> Administrators = FULL

> SYSTEM = FULL

> Everyone = List

>

> Sub Folder - TURN OFF INHERITANCE AND COPY

> Administrators = FULL

> SYSTEM = FULL

> Staff = Read

> Managers = FULL

>

> Also one more quick question. When you say the parent folder is X is that

> the root?

>

>

>

> "MarcusB" <marcusb@llunet.se> wrote in message

> news:uJuoYHurIHA.1952@TK2MSFTNGP05.phx.gbl...

>> The parent folder is disk "X:"

>> THere is in Security:

>> Administrators: FULL Control

>> Everyone :READ & Execute

>> SYSTEM : FULL Control

>> CREATOR OWNER

>> USERS : READ

>>

>> The problematic folder is the folder under drive X and is called

>> "confident"

>>

>> THere is in Security:

>> Administrators: FULL Control

>> Everyone :READ & Execute

>> SYSTEM : FULL Control

>> CREATOR OWNER

>> USERS : READ

>> STAFF: READ

>> Managers: FULL Control

>>

>> Share is:

>> Everyone: Full Control

>>

>>

>> Users who belongs to the STAFF belongs also to Domain Users.

>>

>> STAFF and Managers are Universal groups in the domain.

>>

>>

>> To make sharing easier we gave "Everyone" Full rights and we wanted to

>> manage rioghts by NTFS but it is not working like it should. Shares rights

>> wins?

>>

>> Can you help now?

>>

>> /Marcus

>>

>>

>>

>> JohnB wrote:

>>> It is difficult, if not impossible, to help you further if you don't

>>> answer the follow-up questions that you get here. Myself and AllenM

>>> asked about parent folders and inherited permissions. If you answer

>>> those questions we could probably help you further.

>>>

>>>

>>>

>>> "MarcusB" <marcusb@llunet.se> wrote in message

>>> news:Oje8TqtrIHA.4492@TK2MSFTNGP02.phx.gbl...

>>>> Under share permisions "everyone" have Full Control, change and read

>>>> permissions.

>>>>

>>>> "Staff" group have in Security permission only read.

>>>>

>>>> Thus staff should only have read permission and it have in the Security.

>>>> Which permision: Security or Share take over?

>>>> In my case it seems that Share permissions take over. How is it? It

>>>> should be that NTFS permission take over not oposit. Most restrictiv is

>>>> it not like that?

>>>>

>>>> /Marcus

>>>>

>>>> AllenM wrote:

>>>>> You really need to be more specific and provide more details such as

>>>>> the folder structure and most importantly the NTFS permissions on the

>>>>> parent folder as well as the sub folder. Are you sure there are no

>>>>> duplicate memberships for both Managers/Staff?

>>>>>

>>>>>

>>>>> "MarcusB" <marcusb@llunet.se> wrote in message

>>>>> news:uMFox3rrIHA.4492@TK2MSFTNGP02.phx.gbl...

>>>>>> We got very strange right problems on our server.

>>>>>> We have Common shares and we have enabled all rights for everyone on

>>>>>> the the share. Than we are giving proper security rights to groups.

>>>>>> Managers groups have write and read rights but Staff group have only

>>>>>> read rights.

>>>>>> When the staff login than can also write to the share. Why? What

>>>>>> happen?

>>>>>>

>>>>>>

>>>>>> Marcus

>

>

 Share
Go to topic listing
×
×
  • Create New...