"Access denied" error in a subfolder that the user has "full-control

I created the following share on the server:

Data.

In there I gave group users "read" permission.
I have a sub folder called "teachers" where group users has read permissions
as well.
In teachers there is a folder called "T1" where user T1 has full control.
However whenever user T1 tries to create a file or folder, it says access is
denied.


Any help will be appreciated.

Thanks

"skulmat" <skulmat@discussions.microsoft.com> wrote in message
news:B45A410D-4F30-4AD9-9BE4-3D67A53F4920@microsoft.com...
>I created the following share on the server:
>
> Data.
>
> In there I gave group users "read" permission.
> I have a sub folder called "teachers" where group users has read
> permissions
> as well.
> In teachers there is a folder called "T1" where user T1 has full control.
> However whenever user T1 tries to create a file or folder, it says access
> is
> denied.
>
>
> Any help will be appreciated.
>
> Thanks


Difficult to figure out without knowing what else is in the share and NTFS
(security tab) permissions, and whether inheritance is allowed or blocked,
or if T1 is part of another group that was denied (because Deny permissions
overwrite everything else).

My first thought is that the Teacher group Share permissions are set to
Read. The system will evaluate the Share and the NTFS (Security tab)
permissions and the Most Restrictive will apply.

From what I see, and assuming that you are trying to setup sort of a 'common
public' folder scenario with a subfolder just for a user with FC , I would
suggest the following:

Folder: d:\Data
Shared as "Data"
Share Permissions:
Remove Everyone
Domain Administrators = FC
Authenticated Users = FC

NTFS (Security tab) Permissions:
Remove Everyone
Administrators = FC
Teachers Group = Read, Read & Execute, List
System = FC
Remove anything else in the ACL


Folder d:\Data\Teachers
Shared as: Not shared

NTFS (Security tab) Permissions:
Remove Everyone
Administrators = FC
Teachers Group = Read, Read & Execute, List
System = FC
Remove anything else in the ACL


Folder d:\Data\Teachers\T1
Shared: Not shared.

NTFS (Security tab) Permissions:
Remove Everyone
Administrators = FC
Teachers Group = Read, Read & Execute, List
(The above is set so others can also read T1's folder)
(If not, remove the Teachers Group, but DO NOT deny them)
User T1 = FC
System = FC
Remove anything else in the ACL

That should take care of what you want.

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among
responding engineers, and to help others benefit from your resolution.

Ace Fekay, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA
2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer

For urgent issues, please contact Microsoft PSS directly. Please check
http://support.microsoft.com for regional support phone numbers.