Share permissions 2012R2

[Mark182]

I am having a bit of an issue with share we have. It’s a share for staff and students, Staff should be able to create/ delete and modify files and folders, students should be able to read and view but not modify apart from one folder (disabled inheritance for that folder) The problem we are having is students can do whatever like they at the moment… I have attached a copy of permissions on the share.

[SHimmer45]

if the students have created the folder they will get FC under creator owner. Also Users has Full control set by the bottom permission in your diagram.

 

id remove creator owner & User special and then set permissions for staff and student in separate groups to the folder.

 

for the actual share permissions "authenticated users" with FC will allow everyone to see and access the share and then your file system permissions will do the rest

[Mark182]

Thanks for the reply! I thought the \users was just users on the server. This is our main share for staff&students with 100's of folders and subfolders. When I go to remove "create owner" I get the "inheriting permissions from its parent" If I then click "Disable inheritance" I get "covert inherited permissions" or "Remove all inherited permissions" I am guessing I want to click "convert" as I want all the subfolders apart from one to have the same permissions.

[Mark182]

Ah sorted it now - Thanks.

[SHimmer45]

cool

 

usually i disable inheritance and start from a blank sheet for permissions for a top level folder, makes it much easier rather than grapling with the joy of creator owner etc

[blu4]

As SHimmer45 said, it's best to disable inheritance and do permissions per folder basis to avoid users creating and dropping stupid stuff into folders. It's also the "eureka" moment you have when doing permissions, I couldn't get my head around it but suddenly... EUREKA! When you do permissions again, sit down and look at it with clear mind and try to visualize Helps a lot!