Windows Forum

Ask something
Discussion Locked

Group Permission Problems

0 helpful
8 replies

by awojtowicz

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
If i add a group to a folder, the users of that group are denided access, but if i assign the user to the same folder it works. There are no special permissions. It's insane.

8 replies

by cg it

if you assign a user to a folder they have access cuz the "everyone" group by default had read permissions. if you create a group container, assign that "group" container to a folder and that "group" container has no permissions associated with it for that folder no users within that group will have access. you must assign permissions for the group container for that folder. e.g. add the group to the share permission and then assign share permissions to the group.

by cg it

note: the everyone group means just that. everyone but everyone doesnt mean every group. a group is container for collecting objects and then assigning a policy to that object. with no policy assigned to the object the total effective permission to the object is the most restrictive permission which would be no access.

by awojtowicz

I understand that. When I created the group i assigned full control permissions on the folder. I deleted the everyone group. The share does have my group with full control and the security is set to everyone with full control.

by cg it

gee you didnt mention that in your initial question. I'll quote you, " If i add a group to a folder, the users of that group are denided access, but if i assign the user to the same folder it works. There are no special permissions. It's insane" unquote.

you even said, to quote you again, "there are no special permissions assigned to the group" unquote. groups dont have basic or default permissions to begin with so if you assigned some permissions they would be special permissions.

by cg it

Active Directory, security groups, distribution groups, group polices and NTFS folder/file permissions can be confusing and down right seem "insane" to the novice. the thing to keep in mind is that permissions are cumulative with the most restrictive as the effective permission [the trump card to all that being the deny permission].

by awojtowicz

i'm sorry for the way it was worded, but what i meant by "no special perms" is that the group has full control.

by w2ktechman

Ok, you said share permissions, what about NTFS permissions? set it up like this
Share permissions (authenticated users, full control)
NTFS Permissions (%Groupname% Full control)

This discussion is closed to new replies.