NTFS Permission Issue

[buzzard]

Any help with this people would be great!

The Problem :-

We have a shared drive (U: ) that staff can access this is the root share of all redirected home folders. Staff have the Traverse Folder\Execute permission and read to the Students subfolder. This coupled with Access Based Enumeration has always enabled staff to access the student folder and gather coursework etc. The issue is as follows, now whenever they doubleclick on the U: we get "access denied" now I have just come across this myself quite by accident, and no-one is moaning yet. I am the only one with admin access, after looking in my log no permissions have been changed since the system went in 2 years ago and I've confirmed with staff that they could access student folders via the U:

The Setup:-

(from the server)

E:\Users - Shared as Users$ set up through DFS as \\domainname\dfssharename$\Users

the permission on the E:\Users folder is as follows

Administrators - Full Control
SYSTEM - Full Control
GG_StaffGroup - Traverse Folder/Execute
GG_StudentGroup - Traverse Folder/Execute

within the E:\Users folder are three subfolders these are

E:\Users\Staff
E:\Users\Students
E:\Users\AdminUsers

Permissions Staff folder are

Administrators - Full Control
SYSTEM - Full Control
GG_StaffGroup - Traverse Folder/Execute

with staff having modify on their own subfolder

Permissions for Students Folder are

Administrators - Full Control
SYSTEM - Full Control
GG_StaffGroup - Modify
GG_StudentGroup - Traverse Folder/Execute

Is there anything thats immediatley obvious as to why this isn't now working!!! if i change the mapping to \\domainname\dfsshare\users\students it maps fine and they can access it without issue, but why would it stop working!!! Ahhhhhhhhhhhhhhhhhh!!!!!!!!!!!!!

Many thanks in advance for any assistance!!

[Mcshammer_dj]

have you check the access via the share option.

With ntfs you have file level security and the share level security.

If there are no entries in the share option then you will not get in from a client

[buzzard]

oops forgot to say share permissions on the E:\Users folder is "Everyone" - full control