Shared Area Permissions

[abillybob]

Hi All

 

Hoping someone can help. I must be doing something stupid but my brain can't work it out.

 

We have a shared area and inside that folder on the server there are other folders sorted out by department such as sales, HR, productions etc...

 

I don't want the users being able to create another folder in the root directory but want them to be able to change and edit things in the subsequent folders they have access to. All of our folders such as HR will have the security permission so that the HR Security Group has full control but I only want them to have read access to the root directory.

 

I have tried changing the root directory's sharing permissions to "Everyone" read only but this then stop people for some reason editing files in the department folders, same goes for changing the root directory's security permissions to everyone "read" it stops people editing things in the department folders so I can't win?

 

If someone can point out what my Friday brain isn't seeing I'd really appreciate that!

 

Thanks

[LTurner3692]

Have you checked to see if inheritance is disabled on all sub folders?

[forkies]

Have you tried setting an advanced permission of Deny, write, on this folder only, on the top level folder?

[LTurner3692]

But if inheritance is on that will stop they writing to all folders below to!

[forkies]

But if inheritance is on that will stop they writing to all folders below to!

 

If you use the advanced ntfs permissions and use the “apply to this folder only” it will not apply to the folders below even if inheritance is enabled.

[abillybob]

Inheritance isn't on all the sub folders each have their own permissions! Ah ok thanks @forkies I'll give that a go!

[abillybob]

No luck unfortunately if I do that no one can access the shared area at all!

 

Here's a screenshot of the permissions I set... I'm confused as to what to do with the sharing permissions?

 

[DJ-1701]

Take a look at the screenshot, in your case All Department Groups would be the same as my Pupils.

 

 

If you need any help my services are available for an unreasonable rate.

[DJ-1701]

Oh, and as @Katy pointed out to me, with the screenshot you are showing it looks like you are using 2008, or worse 2003 or below... Just in case you don't know 2008 (including R2) will be End Of Life the middle of January, so no more security updates.

[abillybob]

Take a look at the screenshot, in your case All Department Groups would be the same as my Pupils.

 

[ATTACH=CONFIG]54967[/ATTACH]

 

If you need any help my services are available for an unreasonable rate.

Thanks mate although setting it to what you have above prevents staff changing files in the department folders.. That's how I had it first! Haha how much are we talking?

 

I know about 2008R2 we have an update scheduled for January, thanks though!

[Boredguy]

how much are we talking?

 

We charge £50 for the first hour, then £35 for the next 3 subsequent hours before it goes up to £75 an hour

[DJ-1701]

Thanks mate although setting it to what you have above prevents staff changing files in the department folders.. That's how I had it first! Haha how much are we talking?

 

I know about 2008R2 we have an update scheduled for January, thanks though!

 

Just making sure, did you have both the entries in for your departments? As you note I have two there for Pupils applying to different items.

[abillybob]

Just making sure, did you have both the entries in for your departments? As you note I have two there for Pupils applying to different items.

You amazing man thank you

[Boredguy]

You amazing man thank you

 

Invoice is in the post

[abillybob]

I think you should pay me for being so attractive to be honest so we'll call it even! You're welcome by the way!

[DJ-1701]

I think you should pay me for being so attractive to be honest so we'll call it even! You're welcome by the way!

 

I don't remember seeing any pictures... were you the one that sent me that dodgy link in half broken English?