Probably a simple sharing issue...

[googlemad]

Got a standard 2003 server, not on a domain or anything. (Below folder names / user names are fictional)

 

Have got a folder on the "D:\" drive, 'ABC'.

 

Set a new group up on server 'ReadOnly' with one user 'readonlyuser'

 

Placed 'readonlyuser' user in 'ReadOnly' group and removed from 'Users' group.

 

In sharing permissions for 'ABC' folder allocated 'ReadOnly' user group read only access.

 

The problem I'm having is when connecting to the share from a clean remote machine using the read only user login details to connect is that they seem to have full control i.e. read/write access to the folder. Not only that, they also seem to have control over the other shares set up on the D:\ drive even though the 'ReadOnly' group has no explicit permissions to access those.

 

Any ideas what is going on? I was thinking it may be a 'Everyone' permissions issue at the root D:\ level but I can't modify it due to it being the default Windows share! (Everyone group has been removed from the shared folder rights in question too).

[Ignatius]

You've only mentioned share permissions - have you configured any NTFS permissions? I'd guess that the lockdown can be made tighter by adding (or modifying) the NTFS permissions.

[googlemad]

I did try locking down through the NTFS permissions - But still the same effect.

 

I'm missing something obvious as they can see and have control over the other shares on D:\ drive.

 

(But creating a test share on the C:\ drive with read only access to the ReadOnly group works as expected)

Edited August 19, 2009 by googlemad

[googlemad]

Had a play just now and found that since the Users group has full permissions to the folder, the readonlyuser user has full permissions to the folder.

 

But I removed the readonlyuser user from the Users group and they are only supposed to be in the 'ReadOnly' group