Question on share permissions..

[Sto Rage©]

Hi,
How do I set permission for a share that has permissions like Unix's
rwxr-xr-- (764) on a windows 2000 server?
Basically, there is a global group with a set of users. they need to be able
to create subfolders and files under their share, but only the creator can
modify or delete the file/folders but others in the group should be able to
read/execute all the files/folders.
Everyone in the group should be able to create and modify their own
files/folders but only be able to read/execute others files/folders
Makes sense?
thanks in advance
G

 

[Gordon]

Windows only allows three options on a share, Read, change
and Full Control. If you want better management of
sharing (and who doesn't!) you have to use NTFS file
permissions. Windows handles Sharing level control and
File system control seperately. You will probably need to
create a Share and give a user group full control. Then
assign file system (NTFS) rights to the group for that
shared directory. You will also need to set "advanced"
permissions to the directory as the standard options won't
do what you want (e.g. only the owner can delete/change
their files while everyone else can read them from the
same directory).

Also, be aware that if you have a directory such as
\parent and assign the read only permission to a group for
that share and then want to assign read change to
\parent\child it does not seem to work. In this case the
\parent permissions seem to override the \parent\child
permissions even though they are explicitly set on
\parent\child.

Also, you can turn on and off permission inheritance on
NTFS directories under NTFS security permissions.

Good luck.

Gordon

 

[Sto Rage©]

Thanks Gordon.
This is exactly what I am trying to do. I am using NTFS permissions
to try and set this. I can set it for one user to have full control and the
rest read-only.
But the problem is that everyone in the group needs to be able to
create new files and folders. Meaning anyone in the group could be
the owner and the others should only be able to read the files/folders.
I tried with Creator.Owner and Creator.Group. But didn't work. If I have
use these, what should the permissions be ?

-G