file server permissions
I have file server on which i need to assign a set o permission to set of users. The primary objective is to set permissions to a " tech group" and they should be able to add groups/users to the folder permissions and give permissions to them as required. The tech group should not be able to view/modify/edit the data in the folder. is there any way to achieve this. I've tried it using "read permission" and write permission" in advance properties of folder permissions but it sets the required permission only at parent level and not to child folders. Note: " this folder, subfolders and files " is selected.anand
April 29th, 2011 3:54pm

Hello, try this: Go to the advanced tab of NTFS permissions and then give the Tech group Allow for Change permissions and Deny for what you want to deny Specify that it apply onto this folder, subfolders and files Note that I don't see that as efficient because I think they will be able to change their permissions like. This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
Free Windows Admin Tool Kit Click here and download it now
April 29th, 2011 4:25pm

As Mr X said, if the group has permission to change permissions on folder, then it can change the permission to itself.Shaon Shan |TechNet Subscriber Support in forum |If you have any feedback on our support, please contact tngfb@microsoft.com
May 5th, 2011 10:38am

I gave permissions to anednur@xxx.com “ to only “read permissions “ and “change permissions Then I selected the checkbox to inherit this permission to child objects as shown below. I then navigate to each of the child folders to see if the permissions get inherited to child folders and I see that inheritance works. Now to check the behaviour. I run \\filservername from another domain joined machine. And try to give permissions to some other domain user. The permissions do not get inherited to downlevel folders but stays at the parent folder even after selecting the inherit to child folder check box. access is denied is the error message anand
Free Windows Admin Tool Kit Click here and download it now
May 5th, 2011 1:30pm

As long as Tech Group is allowed to Change Permissions, members can change permissions to ANYTHING they like (for example, Tech Group: Full Control), edit contents and then return old permissions back again. There is no solution for your issue.MCITP: Enterprise Administrator; MCT; Microsoft Security Trusted Advisor; CCNA
May 5th, 2011 5:16pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics