Windows 2003 Folder Inheritance and Rights Issue with Remote Users

  • Thread starter Thread starter amdgamer18@gmail.com
  • Start date Start date
A

amdgamer18@gmail.com

Hi,
I am currently running Windows Server 2003 Enterprise Edition with
SP2. I have a shared folder called FTP Files which is on the root of
the C: drive. I have set the folder to be shared, and have added users
and guests full control of the folder. I have also checked allow
inheritable permissions on that folder. Therefore any newly created
files or folders will get the permissions from FTP Files folder. This
configuration works perfectly when I am locally on the server and
create a folder or file. The permissions are set correctly. However,
when I access the folder via another computer on my LAN (set as a
mapped network drive) the permissions are not set when I create a new
folder. I have the rights to create the folder and put files into the
folder. However, when I look at the permissions, Users and Guests
aren't granted access to the newly created folder. I have to manually
give them rights or else I get Access Denied. How do I configure that
the permissions are set when another machine creates a file or folder?
Any ideas?
 
<amdgamer18@gmail.com> wrote in message
news:1183946817.035843.314140@22g2000hsm.googlegroups.com...
> Hi,
> I am currently running Windows Server 2003 Enterprise Edition with
> SP2. I have a shared folder called FTP Files which is on the root of
> the C: drive. I have set the folder to be shared, and have added users
> and guests full control of the folder. I have also checked allow
> inheritable permissions on that folder. Therefore any newly created
> files or folders will get the permissions from FTP Files folder. This
> configuration works perfectly when I am locally on the server and
> create a folder or file. The permissions are set correctly. However,
> when I access the folder via another computer on my LAN (set as a
> mapped network drive) the permissions are not set when I create a new
> folder. I have the rights to create the folder and put files into the
> folder. However, when I look at the permissions, Users and Guests
> aren't granted access to the newly created folder. I have to manually
> give them rights or else I get Access Denied. How do I configure that
> the permissions are set when another machine creates a file or folder?
> Any ideas?
>

You need to post more detailed information. Running the following
commands from a Command Prompt would help:

cacls "c:\FTP Files" > c:\test.txt
md "c:\FTP Files\TestFolder"
cacls "c:\FTP Files\TestFolder" >> c:\test.txt
notepad c:\test.txt
 
Ok..I ran the following tests...here are the results:

-----------------------------------------------------------------------------
cacls "c:\FTP Files" > c:\test.txt

c:\FTP Files BUILTIN\Administrators:(OI)(CI)F
CREATOR OWNER:(OI)(CI)(IO)F
BUILTIN\Guests:(OI)(CI)F
NT AUTHORITY\SYSTEM:(OI)(CI)F
BUILTIN\Users:(OI)(CI)F
BUILTIN\Administrators:(OI)(CI)F
NT AUTHORITY\SYSTEM:(OI)(CI)F
CREATOR OWNER:(OI)(CI)(IO)F
BUILTIN\Users:(OI)(CI)R
BUILTIN\Users:(CI)(special access:)

FILE_APPEND_DATA

BUILTIN\Users:(CI)(special access:)

FILE_WRITE_DATA
---------------------------------------------------------------------------

md "c:\FTP Files\TestFolder"

Created the above folder without issue

---------------------------------------------------------------------------

cacls "c:\FTP Files\TestFolder" >> c:\test.txt

c:\FTP Files\TestFolder BUILTIN\Administrators:(OI)(CI)F
CREATOR OWNER:(OI)(CI)(IO)F
BUILTIN\Guests:(OI)(CI)F
NT AUTHORITY\SYSTEM:(OI)(CI)F
BUILTIN\Users:(OI)(CI)F
CREATOR OWNER:(OI)(CI)(IO)F
-----------------------------------------------------------------------------
 
I would clean up the permissions set for the group "Users"
for the folder "c:\FTP Files", by giving them full access and
removing the other entries.

I also note that the folder "TestFolder" has full access for
the group "Users", hence there should be no access problem
for that group.

Make sure to set the Share permissions to "Full Access"
for everyone.


"AMD_GAMER" <amdgamer18@gmail.com> wrote in message
news:1184013429.566095.199940@r34g2000hsd.googlegroups.com...
> Ok..I ran the following tests...here are the results:
>
> -----------------------------------------------------------------------------
> cacls "c:\FTP Files" > c:\test.txt
>
> c:\FTP Files BUILTIN\Administrators:(OI)(CI)F
> CREATOR OWNER:(OI)(CI)(IO)F
> BUILTIN\Guests:(OI)(CI)F
> NT AUTHORITY\SYSTEM:(OI)(CI)F
> BUILTIN\Users:(OI)(CI)F
> BUILTIN\Administrators:(OI)(CI)F
> NT AUTHORITY\SYSTEM:(OI)(CI)F
> CREATOR OWNER:(OI)(CI)(IO)F
> BUILTIN\Users:(OI)(CI)R
> BUILTIN\Users:(CI)(special access:)
>
> FILE_APPEND_DATA
>
> BUILTIN\Users:(CI)(special access:)
>
> FILE_WRITE_DATA
> ---------------------------------------------------------------------------
>
> md "c:\FTP Files\TestFolder"
>
> Created the above folder without issue
>
> ---------------------------------------------------------------------------
>
> cacls "c:\FTP Files\TestFolder" >> c:\test.txt
>
> c:\FTP Files\TestFolder BUILTIN\Administrators:(OI)(CI)F
> CREATOR OWNER:(OI)(CI)(IO)F
> BUILTIN\Guests:(OI)(CI)F
> NT AUTHORITY\SYSTEM:(OI)(CI)F
> BUILTIN\Users:(OI)(CI)F
> CREATOR OWNER:(OI)(CI)(IO)F
> -----------------------------------------------------------------------------
>
>
>
 
Ok...I completely removed the permissions from the entire folder. I
then re-created the permissions as you said. That still didn't fix the
permissions and give rights to individual files. So...I clicked on
"Replace permissions entries on all child objects with entries shown
here that apply to child objects" and that check box added the missing
permissions. I will keep an eye on it.
 
Back
Top