what steps are involved in allowing Active Directory folder access

  • Thread starter Thread starter biff
  • Start date Start date
B

biff

Guest
i have added username into Users folder

I have right clicked folder on server and added user on security tab with
write and modify permissions.

I have right clicked folder and shared folder with share name and given user
share permissions of change and read.

User still cannot access folder/files or map to share. The folder we are
mapping to is actually about 3 folders down from the root. I did not give
user access to root folder. Do I need to?
 
RE: what steps are involved in allowing Active Directory folder access

no they dont need permissions on the root if the folder in question is shared
itself. are you definitely trying to map straight to the folder in question
and not the root and then drilling down to it?
James.
--
James Yeomans, BSc, MCSE
Ask me directly at: http://www.justaskjames.co.uk


"biff" wrote:

> i have added username into Users folder
>
> I have right clicked folder on server and added user on security tab with
> write and modify permissions.
>
> I have right clicked folder and shared folder with share name and given user
> share permissions of change and read.
>
> User still cannot access folder/files or map to share. The folder we are
> mapping to is actually about 3 folders down from the root. I did not give
> user access to root folder. Do I need to?
 
RE: what steps are involved in allowing Active Directory folder ac

RE: what steps are involved in allowing Active Directory folder ac

James possibly you may have solved the problem. Consider a server name "fox"

Consider a directory structure that is 3 levels with root folder called
"top", subfolder within top called "middle", and subfolder within middle
called "bottom"

The users was only given access to folder "bottom"

When we mapped to the drive we used:

"net use \\fox\top\middle\bottom"

Maybe we should have used "net use \\fox\bottom" instead?

I assume this same logic would apply when this user is sent hyperlinks? If
person A with top access sends a hyperlink to person B who only has bottom
access and this hyperlink specifies \\fox\top\middle\bottom then person B
could not click the hyperlink even though they have access to bottom.

"James Yeomans BSc, MCSE" wrote:

> no they dont need permissions on the root if the folder in question is shared
> itself. are you definitely trying to map straight to the folder in question
> and not the root and then drilling down to it?
> James.
> --
> James Yeomans, BSc, MCSE
> Ask me directly at: http://www.justaskjames.co.uk
>
>
> "biff" wrote:
>
> > i have added username into Users folder
> >
> > I have right clicked folder on server and added user on security tab with
> > write and modify permissions.
> >
> > I have right clicked folder and shared folder with share name and given user
> > share permissions of change and read.
> >
> > User still cannot access folder/files or map to share. The folder we are
> > mapping to is actually about 3 folders down from the root. I did not give
> > user access to root folder. Do I need to?
 
RE: what steps are involved in allowing Active Directory folder ac

RE: what steps are involved in allowing Active Directory folder ac

Yes i think that is the problem. If you map to
\\server\top\middle\bottom........
you are effectively mapping to a shared folder called top and then just sub
folders middle and bottom below it. When mapping to a shared folder the more
restrictive of the shared folder permissions and the NTFS file permissions
apply. In this case if they only have read share permissions on top folder
then they will only be able to read through the whole structure. You need to
map to \\server\bottom instead, then the share permissions on bottom of read
and modify will be applied.
James.
--
James Yeomans, BSc, MCSE
Ask me directly at: http://www.justaskjames.co.uk


"biff" wrote:

> James possibly you may have solved the problem. Consider a server name "fox"
>
> Consider a directory structure that is 3 levels with root folder called
> "top", subfolder within top called "middle", and subfolder within middle
> called "bottom"
>
> The users was only given access to folder "bottom"
>
> When we mapped to the drive we used:
>
> "net use \\fox\top\middle\bottom"
>
> Maybe we should have used "net use \\fox\bottom" instead?
>
> I assume this same logic would apply when this user is sent hyperlinks? If
> person A with top access sends a hyperlink to person B who only has bottom
> access and this hyperlink specifies \\fox\top\middle\bottom then person B
> could not click the hyperlink even though they have access to bottom.
>
> "James Yeomans BSc, MCSE" wrote:
>
> > no they dont need permissions on the root if the folder in question is shared
> > itself. are you definitely trying to map straight to the folder in question
> > and not the root and then drilling down to it?
> > James.
> > --
> > James Yeomans, BSc, MCSE
> > Ask me directly at: http://www.justaskjames.co.uk
> >
> >
> > "biff" wrote:
> >
> > > i have added username into Users folder
> > >
> > > I have right clicked folder on server and added user on security tab with
> > > write and modify permissions.
> > >
> > > I have right clicked folder and shared folder with share name and given user
> > > share permissions of change and read.
> > >
> > > User still cannot access folder/files or map to share. The folder we are
> > > mapping to is actually about 3 folders down from the root. I did not give
> > > user access to root folder. Do I need to?
 
RE: what steps are involved in allowing Active Directory folder ac

RE: what steps are involved in allowing Active Directory folder ac

OK thanks.

"James Yeomans BSc, MCSE" wrote:

> Yes i think that is the problem. If you map to
> \\server\top\middle\bottom........
> you are effectively mapping to a shared folder called top and then just sub
> folders middle and bottom below it. When mapping to a shared folder the more
> restrictive of the shared folder permissions and the NTFS file permissions
> apply. In this case if they only have read share permissions on top folder
> then they will only be able to read through the whole structure. You need to
> map to \\server\bottom instead, then the share permissions on bottom of read
> and modify will be applied.
> James.
> --
> James Yeomans, BSc, MCSE
> Ask me directly at: http://www.justaskjames.co.uk
>
>
> "biff" wrote:
>
> > James possibly you may have solved the problem. Consider a server name "fox"
> >
> > Consider a directory structure that is 3 levels with root folder called
> > "top", subfolder within top called "middle", and subfolder within middle
> > called "bottom"
> >
> > The users was only given access to folder "bottom"
> >
> > When we mapped to the drive we used:
> >
> > "net use \\fox\top\middle\bottom"
> >
> > Maybe we should have used "net use \\fox\bottom" instead?
> >
> > I assume this same logic would apply when this user is sent hyperlinks? If
> > person A with top access sends a hyperlink to person B who only has bottom
> > access and this hyperlink specifies \\fox\top\middle\bottom then person B
> > could not click the hyperlink even though they have access to bottom.
> >
> > "James Yeomans BSc, MCSE" wrote:
> >
> > > no they dont need permissions on the root if the folder in question is shared
> > > itself. are you definitely trying to map straight to the folder in question
> > > and not the root and then drilling down to it?
> > > James.
> > > --
> > > James Yeomans, BSc, MCSE
> > > Ask me directly at: http://www.justaskjames.co.uk
> > >
> > >
> > > "biff" wrote:
> > >
> > > > i have added username into Users folder
> > > >
> > > > I have right clicked folder on server and added user on security tab with
> > > > write and modify permissions.
> > > >
> > > > I have right clicked folder and shared folder with share name and given user
> > > > share permissions of change and read.
> > > >
> > > > User still cannot access folder/files or map to share. The folder we are
> > > > mapping to is actually about 3 folders down from the root. I did not give
> > > > user access to root folder. Do I need to?
 
Back
Top