Should this work? - Folder permissions

[William Stokes]

Hello,

I was just banging my head against the wall with this. So. Should this work
and if not WHY?

We have folder (W2K server W2K native domain)

DATA -Folder not inheriting permissions

Users1 -Global group with Full access to DATA. Contains Users2 group.

Users2 -Global Group. Contains few domain user accounts and domain admins
group

Domain Admins -Contains administrators.

When I am on the local server as a Domain Administrator (member of Domain
Admins Group) shouldn't I have Full Access to the DATA folder?


Thanks for all tips!
-Will

 

[Roger Abell [MVP]]

Hello,

I was just banging my head against the wall with this. So. Should this
work and if not WHY?

We have folder (W2K server W2K native domain)

DATA -Folder not inheriting permissions

Users1 -Global group with Full access to DATA. Contains Users2 group.

Users2 -Global Group. Contains few domain user accounts and domain
admins group

Domain Admins -Contains administrators.

When I am on the local server as a Domain Administrator (member of Domain
Admins Group) shouldn't I have Full Access to the DATA folder?


Thanks for all tips!
-Will

If those are the only factors involved then yes Domain Admins would
have full access.
You have outlined: a folder with one grant on it of full control to
group Users1 and that does not allow any inheritance of permissions.
Since Users1 is the sum of all accounts members and/or account
members of groups that are members, recursively until you have a
collection of account members, and Domain Admins is included,
the single grant to Users1 would effect the grant for Domain Admins
account members.