Domain User Rights not showing
CASTalk.com Forum Index CASTalk.com
Discussion of DSP, FPGA, storage and embedded system.
 
 FAQFAQ   MemberlistMemberlist     RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 
 
Google
 
Web castalk.com
Domain User Rights not showing

 
Post new topic   Reply to topic    CASTalk.com Forum Index -> Storage System
Author Message
Mario C
Guest
Posted: Fri Feb 20, 2004 9:41 am    Post subject: Domain User Rights not showing Reply with quote
I have a new HP NAS/SAN B4000s with WSS2003 and I have the server on our AD. I have gone through and created a few shares by using the Add Shared Folder wizard. The folder rights appear to work properly for the domain users I have given access, but when I go on the share and look at the permissions it does not show any domain rights, only local rights. Instead of showing Mydomain\Domain Admins it is showing Filesrvr\Administrators. This is making it difficult for me to figure any rights out. Has anyone seen this before, or is this normal?
Back to top
Mario C
Guest
Posted: Sat Feb 21, 2004 1:36 am    Post subject: RE: Domain User Rights not showing Reply with quote
I have gone through and talked with HP who verified that this is how WSS2003 functions. Can anyone else let me know if there is any type of resolution?
Back to top
Mark [MSFT]
Guest
Posted: Mon Feb 23, 2004 10:41 pm    Post subject: RE: Domain User Rights not showing Reply with quote
Not sure if you are looking for methods or just understanding the difference... :)

Share permissions and NTFS security are configured separately. The create share wizard you went through only configures share permissions

Share permissions (what you configured) determine who is allowed to connect to the share resource over the network. NTFS permissions determine who is allowed what actions when actually performing file access (reads/writes/edits.

You can configure both when right clicking a folder and selecting properties - or you can separately configure shares using "net share" and "cacls.exe.

If you have many shares that will require the same NTFS permissions, one thing to do (besides scripts) to make things easier is to create a folder and configure NTFS permissions as you want them. Then create subfolders (which will inherit NTFS rights) and share those out

As to the implications, if you have added Domain\Admins to FileServ\Admins group, then the Domain\Admins will be granted NTFS permissions the same as FileServ\Admins. So, when you created the share with the wizard and added Domain\Admins to the share permissions, they were able to access everything fine
However, if you added Domain\UserA with Full Control share permissions - but did not add Domain\Users or Domain\UserA to the NTFS permissions (or to a local group - like adding Domain\Users to FileServ\Users group), they will be unable to perform any actions on that share

This what you were looking for

Mark St. Joh
This posting is provided "AS IS" with no warranties, and confers no rights
Back to top
 
Post new topic   Reply to topic    CASTalk.com Forum Index -> Storage System All times are GMT
Page 1 of 1

 
 You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum




VoIP Electronics Powered by phpBB