Problem with security permissions

[Charles Newton]

I work in an education environment and have setup a
variety of shared folders for students that teachers also
have access to. Each student is assigned a hidden shared
folder with modify rights and the teachers also have
modify rights. Students have no problems saving to their
folders or other tasks but teachers can only view the
contents. If they try to make changes to anything in the
folder they get an "access denied" error. If they try to
save or paste a file to the folder they get an error that
the file may be in use or the folder is read-only. I've
tried to remove and re-create the share with the same
results. Can anyone help with this?

Thanks.

 

[Pegasus \(MVP\)]

I work in an education environment and have setup a
variety of shared folders for students that teachers also
have access to. Each student is assigned a hidden shared
folder with modify rights and the teachers also have
modify rights. Students have no problems saving to their
folders or other tasks but teachers can only view the
contents. If they try to make changes to anything in the
folder they get an "access denied" error. If they try to
save or paste a file to the folder they get an error that
the file may be in use or the folder is read-only. I've
tried to remove and re-create the share with the same
results. Can anyone help with this?

Thanks.

There are two kinds of permissions: Share permissions
(which are very basic), and NTFS permissions (which are
fully developed). You should disable the share permissions,
by giving everybody full access, and use the NTFS permissions
instead. In Windows, when you have two kinds of permissions
then the more restrictive of the two will apply. Since your
NTFS permission will be more restrictive, things will work out
the way you plan them.

 

[Charles Newton]

Thanks for the reply but I do have the share permissions
set to Everyone and use the NTFS permissions.

 

[Pegasus \(MVP\)]

Try this:
1. Log on as administrator
2. Navigate to one of the problem folders.
3. Type this command for one of the problem files:
cacls SomeFile.doc > c:\permission.txt
4. Log on as a teacher
5. Navigate to the same problem folder.
6. Type this command for the problem files:
cacls SomeFile.doc >> c:\permission.txt
7. Paste the contents of c:\permission.txt into your reply.

 

[Charles Newton]

Instructor view:

420.jpg BUILTIN\Administrators:F
G_500_Teachers:C
nw500A01:C

Administrator view:

420.jpg BUILTIN\Administrators:F
G_500_Teachers:C
nw500A01:C

 

[Charles Newton]

Sorry if this shows up twice...

Instructor view:

420.jpg BUILTIN\Administrators:F
G_500_Teachers:C
nw500A01:C

Administrator view:

420.jpg BUILTIN\Administrators:F
G_500_Teachers:C
nw500A01:C

Thanks.

 

[Pegasus \(MVP\)]

I duplicated your settings like so:

C:\Temp\test.txt FNLHOME\flang:F
FNLHOME\config:C
FNLHOME\PFry:C

I then logged on as PFry and found that I had read/write
rights to test.txt, as expected. You report that your teachers
do not have these rights. I can think of two reasons why
this might be so:
- Your share permissions are incorrect (you claimed in an earlier
reply that they were correct).
- Your teachers are not members of the G_500_Teachers group.

You can explore the second possibility with this command:

cacls 420.jpg /e /g DomainName\SomeTeacherName:C

Now log on as the chosen teacher and check your access rights
to 420.jpg.