Win2003 Sever - Share Permissions - Am I missing something really basic here or what?????

O.K. I'm pretty new with this s whole 'Win Server 2003' and 'Active
Directory' thing but I reckon I'm doing pretty well for someone who is
teaching themselves with a copy of 'Server 2003 or Dummies'

However there is something I just cannot seem to get to work.

I have created a whole lot of dummy data on the main storage drive on
the server for testing and shared this drive and can assign and change
permissions for specific users, groups and OU's etc on this main share
no problem.

However I need to be able to assign specific permissions to
subdirectories within this main shared drive. I need to be able to do
this as we require a reasonably complicated permission setup for a
large number of folders, groups are allowed full access to particular
folders within the share, and limited access to others, each group
with different permissions for different folders.

If I adjust the permissions settings for a particular group on a
folder within the share, from the 'Properties' -> 'Security' dialog,
these permissions have no effect on what that group can do with the
files/folders from a workstation.

The only way I have been able to work out how to do it is to create a
new share for each particular folder and setup the permissions from
the 'Sharing' -> 'Permissions' dialog, however I do not want to be
sharing and setting up permissions fr each drive as we have close to
100 of them and the number is growing all the time...... can you
imagine using a workstation with 100 mapped drives??

I have also tried sharing the sub folders, setting up the permissions,
then only mapping the main drive and accessing them through the main
share, however the sub folder seems to inherit permissions from the
main shared, not using the permissions that are specifically assigned
to it.

Can anyone tell me first of all if I am able to do what I want, and if
so, what on earth am I doing wrong!!

sikcapri@gmail.com wrote in
news:1173297264.954038.51910@8g2000cwh.googlegroups.com:

> O.K. I'm pretty new with this s whole 'Win Server 2003' and 'Active
> Directory' thing but I reckon I'm doing pretty well for someone who is
> teaching themselves with a copy of 'Server 2003 or Dummies'
>
> However there is something I just cannot seem to get to work.
>
> I have created a whole lot of dummy data on the main storage drive on
> the server for testing and shared this drive and can assign and change
> permissions for specific users, groups and OU's etc on this main share
> no problem.
>
> However I need to be able to assign specific permissions to
> subdirectories within this main shared drive. I need to be able to do
> this as we require a reasonably complicated permission setup for a
> large number of folders, groups are allowed full access to particular
> folders within the share, and limited access to others, each group
> with different permissions for different folders.
>
> If I adjust the permissions settings for a particular group on a
> folder within the share, from the 'Properties' -> 'Security' dialog,
> these permissions have no effect on what that group can do with the
> files/folders from a workstation.
>
> The only way I have been able to work out how to do it is to create a
> new share for each particular folder and setup the permissions from
> the 'Sharing' -> 'Permissions' dialog, however I do not want to be
> sharing and setting up permissions fr each drive as we have close to
> 100 of them and the number is growing all the time...... can you
> imagine using a workstation with 100 mapped drives??
>
> I have also tried sharing the sub folders, setting up the permissions,
> then only mapping the main drive and accessing them through the main
> share, however the sub folder seems to inherit permissions from the
> main shared, not using the permissions that are specifically assigned
> to it.
>
> Can anyone tell me first of all if I am able to do what I want, and if
> so, what on earth am I doing wrong!!
>
>

You should check out Distributed File System, I think it will solve your
problems and it is pretty easy to learn and set up.

The main DFS web site is "Distributed File System Technology Center" at:

http://www.microsoft.com/windowsserv...ge/dfs/default
..mspx

And this is an overview topic:

http://technet2.microsoft.com/Window...6ee-3083-4950-
a093-8ab748651b761033.mspx?mfr=true


I think this is also pretty well documented in WS03 Help.

HTH

--
James McIllece, Microsoft

Please do not send email directly to this alias. This is my online account
name for newsgroup participation only.

This posting is provided "AS IS" with no warranties, and confers no rights.

O.K. I have read up on DFS and it seems like a cool feature if you
have multiple servers spread over different physical locations, but I
don't, I just have one logical drive (actually two drives running RAID
0) with a whole bunch of data that I need to be able to control access
too.

Reading documents on the links you gave me I fail to see how DFS is
going to help me, I read that DFS does not change to inherent file
permission and security settings applied by the native OS (which would
seem to be the problem), all it seems to do is provide a centralised
target for groups of files distributed over servers in different
logical or physical locations.

I would be happy if someone could point me towards a particular
document or web page that proves me wrong, but so far, I can't find
it??

Any help??? This is now the last thing I have left to get going on our
new Windows 2003 server???

On 11 Mar 2007 16:39:33 -0700, sikcapri@gmail.com wrote:

>O.K. I have read up on DFS and it seems like a cool feature if you
>have multiple servers spread over different physical locations, but I
>don't, I just have one logical drive (actually two drives running RAID
>0) with a whole bunch of data that I need to be able to control access
>too.
>
>Reading documents on the links you gave me I fail to see how DFS is
>going to help me, I read that DFS does not change to inherent file
>permission and security settings applied by the native OS (which would
>seem to be the problem), all it seems to do is provide a centralised
>target for groups of files distributed over servers in different
>logical or physical locations.
>
>I would be happy if someone could point me towards a particular
>document or web page that proves me wrong, but so far, I can't find
>it??
>
>Any help??? This is now the last thing I have left to get going on our
>new Windows 2003 server???

Why do you have to implement it if you don't need it?

On 7 Mar 2007 11:54:25 -0800, sikcapri@gmail.com wrote:

>However I need to be able to assign specific permissions to
>subdirectories within this main shared drive. I need to be able to do
>this as we require a reasonably complicated permission setup for a
>large number of folders, groups are allowed full access to particular
>folders within the share, and limited access to others, each group
>with different permissions for different folders.
>
>If I adjust the permissions settings for a particular group on a
>folder within the share, from the 'Properties' -> 'Security' dialog,
>these permissions have no effect on what that group can do with the
>files/folders from a workstation.

Look at the advanced settings in the security dialog. The problem is
probably inheritance. If the sub-folders are inheriting permissions from
the parent folder, the more liberal permissions take effect.

sikcapri@gmail.com wrote in
news:1173656372.870889.96950@n33g2000cwc.googlegroups.com:

> O.K. I have read up on DFS and it seems like a cool feature if you
> have multiple servers spread over different physical locations, but I
> don't, I just have one logical drive (actually two drives running RAID
> 0) with a whole bunch of data that I need to be able to control access
> too.
>
> Reading documents on the links you gave me I fail to see how DFS is
> going to help me, I read that DFS does not change to inherent file
> permission and security settings applied by the native OS (which would
> seem to be the problem), all it seems to do is provide a centralised
> target for groups of files distributed over servers in different
> logical or physical locations.
>
> I would be happy if someone could point me towards a particular
> document or web page that proves me wrong, but so far, I can't find
> it??
>
> Any help??? This is now the last thing I have left to get going on our
> new Windows 2003 server???
>

Obviously I misunderstood what you needed, my apologies for that.

I think (as the other people have explained in other posts) that you can do
this fairly simply with folder permissions. If you want to centralize all
the shares you can use a structure something like this:

User folders (Unshared folder)
User 1 (folder share permissions only allow access to user 1)
User 2 (same as above for user 2)

Etc.

Then you can redirect each user's My Documents folder to the server share,
and all their docs will live there and be backed up on the RAID array.

HTH

--
James McIllece, Microsoft

Please do not send email directly to this alias. This is my online account
name for newsgroup participation only.

This posting is provided "AS IS" with no warranties, and confers no rights.

You don't need DFS, it is only when you want to consolidate multiple shares into one logical unit.