hmm - we should clarify that Rick's statment "as long as NTFS inheritance of permission is not disrupted" doesn't mean that the users could ever get more permissions, such as WRITE to the sub-folders, since the share permissions are restricting the maximum permissions for Domain Users to READ only.
However, if the NTFS permissions further below in a sub-folder were to remove the permissions for Everyone or explicitely deny READ, then this would further limit the effective permissions for the Domain Users on the respective folders and the users would not have access to them. /Guido -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rick Kingslan Sent: Dienstag, 9. August 2005 22:00 To: [email protected] Subject: RE: [ActiveDir] NT 4 Permissions Yes - as long as NTFS inheritance of permission is not disrupted. Rick -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin A. Sent: Tuesday, August 09, 2005 1:23 PM To: [email protected] Subject: RE: [ActiveDir] NT 4 Permissions As well as the folders in the in the folders right? -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rick Kingslan Sent: Tuesday, August 09, 2005 2:14 PM To: [email protected] Subject: RE: [ActiveDir] NT 4 Permissions Correct. Effective permissions for anyone who is a member of Domains Users is READ on the files in the folder. Rick -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin A. Sent: Tuesday, August 09, 2005 1:00 PM To: [email protected] Subject: [ActiveDir] NT 4 Permissions It has been a while I have had to deal with this, but I am about to migrate another one of my domains and I have a question about NT 4 Share and NTFS Permissions. Is it the same in NT as it is in 2000/2003 that the scenario below is true Root Folder - NTFS Everyone Full Control, Share Permissions Domain Users Read Sub Folder - NTFS Everyone Full Control If user1 trys to save a file into subfolder, they should be denied access to do so since they have a lower permissions level on the share. Is this right? Justin A. Salandra MCSE Windows 2000 & 2003 Network and Technology Services Manager Catholic Healthcare System 646.505.3681 - office 917.455.0110 - cell [EMAIL PROTECTED] List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
