Win2k3 SBS - (NTFS) Share & Security

[b4u]

Hi,

I'm setting up a share folder on a server and I'm struggling with share/ntfs permissions for the users.

Here is what I want to do:

Share dir:
\\myserver\common
Share Permissions: "Domain Users" "Change+Read"
Security: "Domain Users" "ReadExecute+List+Read"

Inside, I'll have 3 directories:
user1, user2, user3 (for each user in the domain, all belong to "Domain Users").

For user1:
Share Permissions: Not shared, so no permissions here.
Security: "Domain Admins" "Full Control" / "User1" "Modify (all checkboxes except full)"

The result is that User1 can only read/write/delete in it's own folder, even though they can list the other user folders (but it cannot go inside them).

All seems fine, except that User1 can ALSO delete it's own folder ... I just what him (and other users too) to have access and play inside their specific folders ...

I'm struggling with this at the moment, any help, link, anything would be appreciatted.

Any oppinion on how should I do what I want to, if I'm not doing it correctly (or how it should be made) are welcome. I really want to learn!


Thanks

 

[RebateMonger]

As far as your Security settings, take a look at the "Advanced" Permissions entry. If you turn off the "inheritance" and then COPY the current settings, you can now change the permissions in great detail, and you aren't stuck with the upper level permissions.

Take a look at the "Apply Onto" pulldown....
"SUBFOLDERS AND FILES ONLY".

That should not allow the user to delete the upper level folder. He'll only be able to delete files inside the folder, and inside subfolders beneath it.