Unsolved
This post is more than 5 years old
10 Posts
0
1021
June 17th, 2014 01:00
CIFS share: user can't edit folder security permission
Hello,
I have a VNX unified storage 5300.
I created a virtual datamover, vdm1, and joined it to the windows 2012 domain.
I only have CIFS shares configured.
In one of this CIFS share I would like to give some domain users the rights to create folders and to edit the security permissions.
The idea is to delegate to this subset of users (let's call them admin users) the task of creating folders and give the end users access only to one or some of those folders:
user1 can access folder1 but not folder2
user1 can access folder2 but not folder1
and so on.
The problem is that even if I give to the admin user full control on the root folder (the share itself) the users cannot change the folder's permission. They get a "access is denied" error.
So far the only way I found to fix the issue is to add the admin users to the local Administrator group of the VNX CIFS server joined to the domain, but this is too much rights as they can have access to the CIFS server configuration.
I'm sure there is going to be another way to fix this, but so far no luck.
Did anyone face this (or similar) issue?
Thank you in advance
Marco
Archuperi721
110 Posts
0
June 17th, 2014 05:00
Your local permission will be overwritten by Domain group policies / permission’s. If there is any other group that the user is belong has limited permissions which might over comes on the full access.
It’s better to check with a help of Windows administrator who has more access to the permissions.
marco72
10 Posts
0
June 22nd, 2014 03:00
Thank you Archuperi721
The issue was related to the fact that both share and NTFS permission were configured and the share permission were more restrictive than the NTFS ones thus the users weren't able to edit the permissions of the objects they created.
Cheers
Marco