Permission question

[Adam Raff]

Good Day,

A few weeks back I asked a question about permissions and it worked out fine
so far. After the update I had one user that did not quite work out. I was
able to fix the problem but I would like some input on what happened and if
anybody can give me some insight on the matter.

We have a network which is 2003 with AD. The data is broken down into
departments. The department that I needed to share was Creative Dept. Only
the Art people had access to this folder. So to make things simple I shared
the folder out as the letter M so that all users are able to gain access to
the folder. I gave Everyone group Read & Execute rights and the Art people
still had modify rights (users are also broken down into groups).

Art
ArtCommg - Parent (This folder does not get permissions from Art)
Artfolder - Child of ArtCommg
Creative Dept - Child of ArtCommg gets permissions from
ArtCommg by inheritance per Advanced setting view - I shared this directory
out as M so all users now get this network drive.


After changing the rights I went around to the Art department and they had
no issues, (or so I thought) they could save and modify the files that they
always did. I then went to some users and checked there and they were able
to view but could not save or modify the files back to the art folder.
Great everything was working as it should until somebody in the Art
department called me and said he kept on getting a read only error. I went
up and looked at his system and sure enough he was pulling up files as read
only. I checked his permissions and he was part of the Art group and that
group had modify rights. I rebooted his PC and the same thing happened.

After some thinking I remembered that the share permissions can overwrite
the NTFS permissions so I went there and it showed that Everyone only had
Read rights (Everyone was the only one showing up), I gave everyone full
rights and tried again, the user was able to work on the file. He was the
only one in the Art department that was affected.

Does anybody have any ideas why or where I can look to see if something is
not setup right in this case. The problem is fixed but it bothers me that
everybody worked but him.

Thanks
Adam Raff

 

[Guest]

From personnal experience I can tell you that the entry Everyone under
permissions does not include 'everyone'. There is some literature about that
oddity somewhere on the Microsoft site. (its been a while) Safe to say that
sometimes you need to add the user directly in order for them to have the
rights. Hope that helps.

 

[Adam Raff]

If the user was part of the everyone group I may agree but in this case the
user was part of the Art group who had modify rights so he should have been
able to view or modify anything he wanted. As he did before.

After reading your email I decided to look to see if he is part of the
everyone group and I can't seem to find it. Is it hidden somewhere? What
folder is it in. I don't see it in users folder with the other groups?

Thanks
Adam Raff