Share/NTFS Permissions - grant more rights further down the tree

  • Thread starter Thread starter Tim Pring
  • Start date Start date
T

Tim Pring

Guest
Can someone please assist to help me achieve this?
I have a folder structure similar to this
-\Shared\Data1\Data2
I have 2 groups of people
Everybody
Admins
I need to achieve the following permissions to these folders for these groups
Data1 - Everybody=R; Admins=C
Data2 - Everybody=C; Admins=C

Now, I can easily achieve rights for Everybody by granting 'C' permissions
to 'Share' for the 'Everyone' group; assigning 'R' perms to 'Data1' for
'Everyone and 'C' perms to 'Data2'.

And for Admins, I have granted 'C' perms to the 'Share' for the 'Admins'
group; assigned 'C' perms to both 'Data1' and 'Data2' for 'Admins'.

Testing shows that the permissions for Everybody works as intended, but the
permissions for Admin follow the security of Everybody and they have only 'R'
perms to 'Data1'.

Now I suspect that this is to do with the fact that Admins are members of
both the 'Everyone' and 'Admins' groups. I'd appreciate confirmation of this
from someone who knows for sure.

I'd also appreciate any suggestions you may have for how I can achieve the
above.
 
Re: Share/NTFS Permissions - grant more rights further down the tree

Tim,
That should be quite simple:
(Share permissions on folder "Shared": Everyone F or C)
Shared (NTFS): Everyone R Admins C
Data2 (NTFS): Everyone C, Admins C
Just make sure that the folders are set to inherit (by default they will be)
and reset permissions first to remove any misconfig,
Anthony,
http://www.airdesk.co.uk


"Tim Pring" <TimPring@discussions.microsoft.com> wrote in message
news:2D18115E-1455-456C-924F-8C45A9733935@microsoft.com...
> Can someone please assist to help me achieve this?
> I have a folder structure similar to this
> -\Shared\Data1\Data2
> I have 2 groups of people
> Everybody
> Admins
> I need to achieve the following permissions to these folders for these
> groups
> Data1 - Everybody=R; Admins=C
> Data2 - Everybody=C; Admins=C
>
> Now, I can easily achieve rights for Everybody by granting 'C' permissions
> to 'Share' for the 'Everyone' group; assigning 'R' perms to 'Data1' for
> 'Everyone and 'C' perms to 'Data2'.
>
> And for Admins, I have granted 'C' perms to the 'Share' for the 'Admins'
> group; assigned 'C' perms to both 'Data1' and 'Data2' for 'Admins'.
>
> Testing shows that the permissions for Everybody works as intended, but
> the
> permissions for Admin follow the security of Everybody and they have only
> 'R'
> perms to 'Data1'.
>
> Now I suspect that this is to do with the fact that Admins are members of
> both the 'Everyone' and 'Admins' groups. I'd appreciate confirmation of
> this
> from someone who knows for sure.
>
> I'd also appreciate any suggestions you may have for how I can achieve the
> above.
 
Back
Top