NTFS Permission Issue

[buzzard]

Any help with this people would be great!

 

The Problem :-

 

We have a shared drive (U: ) that staff can access this is the root share of all redirected home folders. Staff have the Traverse Folder\Execute permission and read to the Students subfolder. This coupled with Access Based Enumeration has always enabled staff to access the student folder and gather coursework etc. The issue is as follows, now whenever they doubleclick on the U: we get "access denied" now I have just come across this myself quite by accident, and no-one is moaning yet. I am the only one with admin access, after looking in my log no permissions have been changed since the system went in 2 years ago and I've confirmed with staff that they could access student folders via the U:

 

The Setup:-

 

(from the server)

 

E:\Users - Shared as Users$ set up through DFS as \\domainname\dfssharename$\Users

 

the permission on the E:\Users folder is as follows

 

Administrators - Full Control

SYSTEM - Full Control

GG_StaffGroup - Traverse Folder/Execute

GG_StudentGroup - Traverse Folder/Execute

 

within the E:\Users folder are three subfolders these are

 

E:\Users\Staff

E:\Users\Students

E:\Users\AdminUsers

 

Permissions Staff folder are

 

Administrators - Full Control

SYSTEM - Full Control

GG_StaffGroup - Traverse Folder/Execute

 

with staff having modify on their own subfolder

 

Permissions for Students Folder are

 

Administrators - Full Control

SYSTEM - Full Control

GG_StaffGroup - Modify

GG_StudentGroup - Traverse Folder/Execute

 

Is there anything thats immediatley obvious as to why this isn't now working!!! if i change the mapping to \\domainname\dfsshare\users\students it maps fine and they can access it without issue, but why would it stop working!!! Ahhhhhhhhhhhhhhhhhh!!!!!!!!!!!!!

 

Many thanks in advance for any assistance!!

Edited March 18, 2009 by buzzard
automatic smiley!

[Mcshammer_dj]

have you check the access via the share option.

 

With ntfs you have file level security and the share level security.

 

If there are no entries in the share option then you will not get in from a client

[buzzard]

oops forgot to say share permissions on the E:\Users folder is "Everyone" - full control