Massive File Server Issue - HELP!

[Whistler]

Hi, Configured Server 2016 to replace a 2008 Box.

 

Problem is, all shares hosted on drives (\\fileserver2\g$) is shared somehow with full control to any user. Even if they're not on the domain they can have full control to the drive.

 

I cannot figure out how to change this anywhere. To clarify, any folders shared from within the drive have the right permissions set, however the drives themselves (the admin) shares are shared with full control any I can't figure out how to change it!

 

Thanks!

[jmcdermott]

Are you refereeing to share permissions or NTFS permissions?

I suspect you are looking at the admin share permissions which you chould be able to overwrite with ntfs permissions.

 

Or from and elevated command prompt run 'net share g$ /delete' which should just remove the share.

[Whistler]

Are you refereeing to share permissions or NTFS permissions?

I suspect you are looking at the admin share permissions which you chould be able to overwrite with ntfs permissions.

 

Or from and elevated command prompt run 'net share g$ /delete' which should just remove the share.

 

The volume isn't natively shared apart from the admin share. I haven't shared it myself, so yes. I'm assuming NTFS related? I've removed "Everyone" but it still persists? from what i remember, if i remove the admin share, doesn't it re-create at reboot?

[jmcdermott]

That can be prevented by changing 'HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanServer\Parameters\AutoShareWks' to 0 if my memory does not fail me.

 

If NTFS is the issue and you have removed 'everyone' it should all work as expected. Can you create files on the root of the share?

[Whistler]

That can be prevented by changing 'HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanServer\Parameters\AutoShareWks' to 0 if my memory does not fail me.

 

If NTFS is the issue and you have removed 'everyone' it should all work as expected. Can you create files on the root of the share?

 

Done as you said with removing "Everyone" however still lets me write to the folder. Very strange. I've installed another 2016 Server, and the permissions work as default.

[jmcdermott]

Done as you said with removing "Everyone" however still lets me write to the folder. Very strange. I've installed another 2016 Server, and the permissions work as default.

 

Very strange, I am afraid that is the end of my ideas on the subject. The only other thing I can think of is NFS shares being setup but I don't think that is the case here.

[djm968]

I know it sounds stupid...... but have you tried rebooting the server. Only other option I can think of is recreating the shares.

[Geoff]

Normally you set 'Everyone' to have 'Full control' on the share permissions as the NTFS permissions take care of things in more detail. However this can come unstuck if you formatted the drive with FAT32.