We have found an issue with giving full rights to the share:
        The NTFS file owner can still change permissions.

The creator of a file is the owner and has the ability to change NTFS 
permissions on that file/folder, regardless of what the existing NTFS rights 
are!
This allows the file creator to alter the permissions either blocking access or 
giving excess permissions.

A solution in this case is to create the share with Everyone( or Authenticated 
Users/Given group...) Change rights and Administrators FULL Control.  NTFS is 
then set as desired.  Limiting the share to Change prevents the owner from 
modifying NTFS rights if accessing the file through the share, but leaves 
everything else.

Drew Monrad 

Reply via email to