Cannot modify Network Folder

I have created a Network folder with 5 subfolders. I created all of these
folders with a Domain Admin account. Domain Admins have full control, and
full function. However, I also added a single user account to the security
list, who is a member of the Domain Users group. The Domain User Group has
permission to read/excute, however I explicitly set the single user account
to have full control.

However, it seems that this user is only capable of using the "Domain User"
group permissions because this user can't create/edit/modify anything in the
folder, but can read/copy.

I understand that an expicit "deny" setting in the Domain User group policy
will over ride any "allow" settings, but this folder is located on a share
which must have limited access for Domain Users, this one folder is the
exception for this one user.

ex.

\\SHARE(must have read/execute only for Domain User group)
-->\\SHARE\New Folder(read/exe for Domain User Group AND full control
for single member of Domain User group)

Any ideas why this user can't creat/modify here??

All help is GREATLY appreciated! Thanks in advance!

This is on a Win2000 Server Network w/ Win2000Pro workstations
--
B_James
"Do the right thing. It will gratify some people and astonish the rest" -
Mark Twain

Make sure that there are no NTFS file permissions set for the actual files
they are trying to access. The user may have rights within the directories
but not on the actual files within the directories and those will take
precedence. This can get pretty granular.

"BJ_at_ACA" wrote:

> I have created a Network folder with 5 subfolders. I created all of these
> folders with a Domain Admin account. Domain Admins have full control, and
> full function. However, I also added a single user account to the security
> list, who is a member of the Domain Users group. The Domain User Group has
> permission to read/excute, however I explicitly set the single user account
> to have full control.
>
> However, it seems that this user is only capable of using the "Domain User"
> group permissions because this user can't create/edit/modify anything in the
> folder, but can read/copy.
>
> I understand that an expicit "deny" setting in the Domain User group policy
> will over ride any "allow" settings, but this folder is located on a share
> which must have limited access for Domain Users, this one folder is the
> exception for this one user.
>
> ex.
>
> \\SHARE(must have read/execute only for Domain User group)
> -->\\SHARE\New Folder(read/exe for Domain User Group AND full control
> for single member of Domain User group)
>
> Any ideas why this user can't creat/modify here??
>
> All help is GREATLY appreciated! Thanks in advance!
>
> This is on a Win2000 Server Network w/ Win2000Pro workstations
> --
> B_James
> "Do the right thing. It will gratify some people and astonish the rest" -
> Mark Twain

Thanks for the input, currently there is only one file in the Folder &
SubFolder(s), these folders were created as a new destination for newly
created files. However, the user cannot created a new file there, copy an
existing file to the folder, or rename the one test file I have placed in the
folder. I have verified that the files secrity properties match the security
properties of the parent folders. I've also reset the permissions from the
Partent folder, and allowed the to propogate to all child objects. Yet, the
user still cannot make any changes.
--
--
B_James
"Do the right thing. It will gratify some people and astonish the rest" -
Mark Twain


"Transam388" wrote:

> Make sure that there are no NTFS file permissions set for the actual files
> they are trying to access. The user may have rights within the directories
> but not on the actual files within the directories and those will take
> precedence. This can get pretty granular.
>
> "BJ_at_ACA" wrote:
>
> > I have created a Network folder with 5 subfolders. I created all of these
> > folders with a Domain Admin account. Domain Admins have full control, and
> > full function. However, I also added a single user account to the security
> > list, who is a member of the Domain Users group. The Domain User Group has
> > permission to read/excute, however I explicitly set the single user account
> > to have full control.
> >
> > However, it seems that this user is only capable of using the "Domain User"
> > group permissions because this user can't create/edit/modify anything in the
> > folder, but can read/copy.
> >
> > I understand that an expicit "deny" setting in the Domain User group policy
> > will over ride any "allow" settings, but this folder is located on a share
> > which must have limited access for Domain Users, this one folder is the
> > exception for this one user.
> >
> > ex.
> >
> > \\SHARE(must have read/execute only for Domain User group)
> > -->\\SHARE\New Folder(read/exe for Domain User Group AND full control
> > for single member of Domain User group)
> >
> > Any ideas why this user can't creat/modify here??
> >
> > All help is GREATLY appreciated! Thanks in advance!
> >
> > This is on a Win2000 Server Network w/ Win2000Pro workstations
> > --
> > B_James
> > "Do the right thing. It will gratify some people and astonish the rest" -
> > Mark Twain

"BJ_at_ACA" <(E-Mail Removed)> wrote in message...
> Thanks for the input, currently there is only one file in the Folder &
> SubFolder(s), these folders were created as a new destination for newly
> created files. However, the user cannot created a new file there, copy an
> existing file to the folder, or rename the one test file I have placed in
> the
> folder. I have verified that the files secrity properties match the
> security
> properties of the parent folders. I've also reset the permissions from
> the
> Partent folder, and allowed the to propogate to all child objects. Yet,
> the
> user still cannot make any changes.

Sounds like the Share permissions are set to read-only for Domain Users.

--
Todd J Heron, MCSE
Windows Server 2003/2000/NT; CCA