+ Post New Thread
Results 1 to 6 of 6
Windows Server 2008 R2 Thread, effective permissions - confused... in Technical; Hi, We have a share on one of our servers for which 'Everyone' has Full Control. Staff are members of ...
  1. #1

    Join Date
    Jul 2010
    Location
    Leicester
    Posts
    31
    Thank Post
    19
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    effective permissions - confused...

    Hi,

    We have a share on one of our servers for which 'Everyone' has Full Control.

    Staff are members of a security group which tightens up the security on that share and its folders.....or so you would think.

    Regardless of the perms we give to this staff group they still end up with Full Control.

    Even if I create a new folder, switch off inherited permissions, remove the staff security group........they still have Full Control.

    I know its probably something easy but just can't get my head around it - please put me out of my misery....

    Cheers

  2. #2

    bladedanny's Avatar
    Join Date
    May 2009
    Location
    Sheffield
    Posts
    1,278
    Thank Post
    189
    Thanked 306 Times in 228 Posts
    Rep Power
    131
    If 'Everyone' has full control this will be the case unless you use the deny permission on your staff group. Simply removing, say the modify permisison of staff wont work (AFAIK). Try removing the everyone group and see what happens.

    Hope this helps.

    Dan

  3. #3

    Join Date
    Jul 2010
    Location
    Leicester
    Posts
    31
    Thank Post
    19
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Do you suggest using Deny? I can get it to work that way but assumed that the NTFS perms themselves being more restrictive would take control.

    Do you think its something to do with the NTFS permissions at the Share Level? Therefore even if I remove the group from a folder members of that groups are still getting access?

  4. #4

    bladedanny's Avatar
    Join Date
    May 2009
    Location
    Sheffield
    Posts
    1,278
    Thank Post
    189
    Thanked 306 Times in 228 Posts
    Rep Power
    131
    No I don't use deny, mainly because deny is higher than allow. So if a member of staff is in two groups then the deny permission takes effect. If you know that staff members aren't in more than one group you could use deny. Even with inherited permissions you would still be able to see them on that folder, they would just be greyed out. I usually just take out the everyone group and just list which groups need access.

    Hope this helps.

  5. #5

    Join Date
    Jul 2010
    Location
    Leicester
    Posts
    31
    Thank Post
    19
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Looks like my predecessor had managed to include our main staff security group in another with 'Full Control' and therefore any changes made to perms at folder level were being overiden - hence effective permissions always being 'Full Control'.

    Have now removed that and can control access with that staff group.

    Thanks for your help as always!

    Simon

  6. #6

    bladedanny's Avatar
    Join Date
    May 2009
    Location
    Sheffield
    Posts
    1,278
    Thank Post
    189
    Thanked 306 Times in 228 Posts
    Rep Power
    131
    Glad you got it sorted.

SHARE:
+ Post New Thread

Similar Threads

  1. Cost effective printer
    By laserblazer in forum Hardware
    Replies: 15
    Last Post: 12th May 2009, 08:21 PM
  2. [Pics] Simple but effective
    By Little-Miss in forum Jokes/Interweb Things
    Replies: 8
    Last Post: 7th January 2009, 11:59 AM
  3. [News] Effective Immediately
    By mattx in forum Jokes/Interweb Things
    Replies: 1
    Last Post: 30th October 2008, 02:44 PM
  4. SIMS Effective Date
    By danIT in forum MIS Systems
    Replies: 2
    Last Post: 18th July 2008, 02:05 PM
  5. Quick effective imaging...
    By Ben_Stanton in forum How do you do....it?
    Replies: 32
    Last Post: 1st May 2007, 01:07 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •