Sorry - got distracted, and sent a truncated list of permissions.
On K:\Groups\Dummy, the permissions are
The interesting NTFS permissions on the directory that is shared
(K:\Groups) for my example are:
Domain Users: Read-Execute - This folder only
Read-Execute permissions include:
Traverse Folder/Execute File
List Folder/Read Data
Read Attributes
Read Extended Attributes
Read Permissions
Creator/Owner:Modify - Subfolders and files only
DepartmentManagers: Special permissions - This folder and subfolder
Traverse Folder/Execute File
List Folder/Read Data
Read Attributes
Read Extended Attributes
Read Permissions
Create Folders/Append Data
Write Attributes
Write Extended Attributes
Delete Subfolders and Files
Kurt
On Thu, Jun 23, 2011 at 09:33, Evan Brastow
<[email protected]> wrote:
> No luck. Even though all users now have Traverse folder/execute file and
> List folder/read data rights on the top level folder, still no one can even
> see that folder, nevermind subfolders.
>
>
>
> So, I guess I'm going to have to assign people a bunch of rights for the top
> level folder, then I'll just go to each sub level folder manually and take
> away their right there.
>
>
>
> Thanks all for trying to help.
>
>
>
> Evan
>
>
>
>
>
> From: Evan Brastow
> Sent: Thursday, June 23, 2011 12:27 PM
>
> To: 'NT System Admin Issues'
> Subject: RE: Woah... why am I brain cramping on this!? (Folder permissions)
>
>
>
> Darn.. I set all users to have the Traverse folder/execute file rights on
> the top level folder, and they still can't even see the folder. Geesh...
> I've got 15 users doing nothing while I'm figuring this out... lol
>
>
>
> I'm going to try assigning them the List folder/read date rights, too.. but
> I'm afraid that will let them, list contents of subfolders within the top
> level folder, too. Oh well.. I'll let you guys know how it goes.
>
>
>
> Evan
>
>
>
> From: Evan Brastow
> Sent: Thursday, June 23, 2011 11:49 AM
> To: 'NT System Admin Issues'
> Subject: RE: Woah... why am I brain cramping on this!? (Folder permissions)
>
>
>
> Hrm.. one more question. I'll try FileACL tonight, but for now I'm just
> setting permissions on the top level folder and then overriding those
> permissions on the few folders I need to. Question is... what permission do
> I need to give users to just see the sub level folders? I see Traverse
> folder/execute file and List folder/read data which sound pertinent... but I
> just want to be sure I know the end result of those options?
>
>
>
> Currently I'm back to where users can't even see that the top level folder
> exists, which is not what I'm looking for....
>
>
>
> Thanks again peoples...
>
>
>
> Evan
>
>
>
>
>
>
>
> From: Andrew S. Baker [mailto:[email protected]]
> Sent: Wednesday, June 22, 2011 6:34 PM
> To: NT System Admin Issues
> Subject: Re: Woah... why am I brain cramping on this!? (Folder permissions)
>
>
>
> Just remove the inheritance on the few folders that you need to setup
> different permissions on, rather than from the root itself
>
> -ASB: http://about.me/Andrew.S.Baker
>
> Sent from my Motorola Droid
>
> On Jun 22, 2011 6:02 PM, "Evan Brastow" <[email protected]>
> wrote:
>> Amazingly simply question, but I've not done this in so long that I can't
>> remember.
>>
>> I have a folder on my file server (Windows 2008 R2) called Secure.
>>
>> Within that folder there are around 50 subfolders. Most users have no
>> access to these folder, but some do need access to a few. So I had set up
>> SYSTEM and Domain Admin full control on the Secure top level folder. Then I
>> tried to change the subfolders where some users needed permissions, but it
>> told me the folder permissions couldn't be changed because they were
>> inheriting from their parent. Do I need to get rid of inheritable
>> permissions so that I can have a few folders that have different permission
>> levels than their parent?
>>
>> If I get rid of inherited permissions, and have to go set all 50 folders
>> manually, which would be a pain, what do I need to set them to?
>>
>> Essentially, I need User A to click on the Secure folder and see nothing
>> in it (or the folder list could be shown, I don't care) but I need User B to
>> click on the Secure folder and see (and be able to read/write to) the
>> folders he needs to access and change.
>>
>> Help!!??
>>
>> I know I had this set up before, but when I moved to a new server, I lost
>> those permissions.
>>
>> Thanks,
>>
>> Evan
>>
>> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
>>
>> ---
>> To manage subscriptions click here:
>> http://lyris.sunbelt-software.com/read/my_forums/
>> or send an email to [email protected]
>> with the body: unsubscribe ntsysadmin
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to [email protected]
> with the body: unsubscribe ntsysadmin
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to [email protected]
> with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to [email protected]
with the body: unsubscribe ntsysadmin
