File Folder security
13230 1152.359375 {smb2:1829, tcp:1570, ipv4:2} boston 192.168.0.50 smb2 smb2:c create (0x5), name=readme\readme.txt@#13230, context=dhnq, context=mxac, mid = 745
13231 1152.359375 {tcp:1570, ipv4:2} 192.168.0.50 boston smb2 smb2:r , mid = 745 - nt status: system - error, code = (34) status_access_denied
have double checked folder security , there 2 ( administrator , hr group )which have access , both have enable i.e. full access problem having vista pc logged in hr member user. can confirm user part of hr group , no other group there should no deny overriding access permission.
hello acmsoft,
the share permissions determine type of access others have shared folder across network while ntfs (security) permissions determine action users can take folder or file both across network , locally.
by default, microsoft set share permission read and this makes ntfs permissions limited read when accessing them on network. @ way, differentiate share permissions ntfs permissions consider share permissions entry point resources. after share permissions offer change and/or full control can ntfs (security) permissions of type used.
so should concentrate on security permissions grant/deny/restrict access share folder. normally, on share folder, remove group, add administrator , hrgroup (full control) , on ntfs (security settings) grant necessary permissions needed..
remember, ever action users take on share, such delete, rename, create etc set in security permissions.
in situation, can set both share , security permissions same (full control) administrators , hr group , remove group share permission.
isaac oben mcitp:ea, mcse
Windows Server > File Services and Storage
Comments
Post a Comment