Permissions don't seem to work in W2K Server

[rowdymon]

So I'm feeling kind of dumb right now, and I'm hoping y'all can help
me figure out what I've overlooked...

We have a W2K server domain with 4 servers and some odd 50 pc's. Two
servers are located off site at remote locations, the other two are
local.

I've created security groups for several folders, removed the
inherited permissions, and set permissions for the administrators, and
individual security groups only...

However comma

This hasn't worked. Anyone on the network can browse the folders in
question, open, modify, create and delete.

I'm at my wits end, and my googling skills are apperantly lacking...

Suggestions? Further information?

Thanks

 

[Roger Abell [MVP]]

What you have done sounds correct.
If you have a folder that is shared, and in the NTFS permissions
dialog for that folder you see only grants to Administrators and
to CustomGroup, and these are set explicitly (not inherited) on
that folder and these are inheriting on down within
but
you find any domain account can access within the folder
then
all domain accounts are members either in Administrators or
in CustomGroup on the sharing machine, or all accesses are
being remapped to use a domain account that is (such as by
having network credentials defined or by explicitly doing
a connect-as; for the first check while logged in as an account
that does but should not have access by issuing at start/run
"control keymgr.dll" without the "s of course).

There is just no other explaination.