Sharing A Folder

[TheHitman]

Hi guys,
I am trying to share a folder called "USERS" in my windows 2008 server as following,
Please notice!!
"USERS" folder has users in it like: Charles, John, Daniel, Pete etc.

Now,
- Administrator/administrators will have full rights to the "USERS" folder and everything in it.
- Charles will have rights to only "Charles" folder, John will have rights to only "John" folder etc.

I have tryed in millions of ways with zero success!
Administrator rights does work but user rights no!
Server says "acces denied" when the user tryes to create a folder/file or delete a folder/file.

Can someone please help me about how to do this?

Thanks in advance
-daniel

 

[mmthomas]

Did you give your users enough permissions on the Share? Remember that you have to give them as much access on the Share level as you are going to give them NTFS permissions at any level beneath the share.

 

[TheHitman]

Did you give your users enough permissions on the Share? Remember that you have to give them as much access on the Share level as you are going to give them NTFS permissions at any level beneath the share.

Thanks Matt,
The problem is,
I don't know what is enough!
I need a step by step help in order to do it right.

-daniel

 

[mmthomas]

When you share a folder, there are two permissions to think about. First are the Share permissions (the permissions set on the folder when you right-click and share it). Second are the NTFS permissions (the Security tab permissions on files and folders).

In Server 2008, when you Share a folder, the default permissions added to the share when you create it are to give Administrators Owner permissions and Everyone Read permissions. The Share permissions set the absolute limit of permissions a user can have when they access a folder through the share. So with the default Share permissions, if I make a folder called Greg beneath the Users folder and give the account GregG full access to folder Greg, Greg will only have Read permissions because he is limited through the Everyone - Read permission at the share level. What many people do is give Everyone Full Control permissions at the share level, and then use the NTFS permissions on the folders to limit access. If you want to be a little more secure, you can remove the Everyone group and add the Authenticated Users group instead and give it Full Control permission on the share. You can change these permissions by right clicking on the shared folder and choosing Properties > Sharing tab > Advanced Sharing > Permissions.

So, I would check that permission first.

Then, if you don't want users to have access to the top level Users folder, you can assign Authenticated Users only "List folder contents" permissions and give Admins full control on it. Then on the subfolders, you will turn off inherited permissions and give each user account full control of their own folder.

 

[TheHitman]

When you share a folder, there are two permissions to think about. First are the Share permissions (the permissions set on the folder when you right-click and share it). Second are the NTFS permissions (the Security tab permissions on files and folders).

In Server 2008, when you Share a folder, the default permissions added to the share when you create it are to give Administrators Owner permissions and Everyone Read permissions. The Share permissions set the absolute limit of permissions a user can have when they access a folder through the share. So with the default Share permissions, if I make a folder called Greg beneath the Users folder and give the account GregG full access to folder Greg, Greg will only have Read permissions because he is limited through the Everyone - Read permission at the share level. What many people do is give Everyone Full Control permissions at the share level, and then use the NTFS permissions on the folders to limit access. If you want to be a little more secure, you can remove the Everyone group and add the Authenticated Users group instead and give it Full Control permission on the share. You can change these permissions by right clicking on the shared folder and choosing Properties > Sharing tab > Advanced Sharing > Permissions.

So, I would check that permission first.

Then, if you don't want users to have access to the top level Users folder, you can assign Authenticated Users only "List folder contents" permissions and give Admins full control on it. Then on the subfolders, you will turn off inherited permissions and give each user account full control of their own folder.

Thanks Matt,
This isn't unfortunately what I need!
I don't need general information, I just need guide of how to do it.
Internet is full of general info which isn't helping me any.

First,
How to share it so, that administrator have full access to everything.

Second,
How to give right to each folder of each user.