Tearing my hair out over folder permissions in 2008
Hopefully you guys can help me, I've got myself in a right muddle with some folder permissions on my Win Server 2008 / Windows XP network.
Here's the setup.
A top-level shared folder, called "staff". Contains several other shared folders called after our different sites.
The reason the sub-folders are also shared, is that they are directly mapped for student, who are still using non-AD logons.
I want everyone in the "tutors" group in AD to have read access to the top level, but not write/modify. I want them also to have full rights to the sub-folders.
So, I've set the two types of sharing on the top level "staff" folder. In the File Sharing bit, the tutors group is set as READER. In the NTFS bit they have "Read & Exe, List, Read" rights.
When I logon as a staff member (i.e. in the tutors folder) I can see the contents of the staff folder, access them, but not Read or Write. This is correct.
I then set the permissions on the sub-folders, within Staff. In the File Sharing bit, I set the tutors group to be "Co-Owner" and in NTFS, I give them Full Control.
If I now logon as Staff member I have correct rights for the top level staff folder, but cannot Write / Delete.
It's like the top level is setting the rights for the lower levels, but I can't work out why.