Hello,
I am having some difficulties with ACL and share permissions. As per MS docs, the best practice for a shared folder to give full share rights to a particular group and then give lesser permissions at the NTFS level for that particular group or users. This is because the less permissive permission takes precedence when computed.
So i have 1 shared folder name:
- MyDepartment: no one but admins can create folders/files within this folder as this are managed; so far we have 2 folders Library and Users. This is working as expected.
- MyDepartment\Library: members of the group can read/write without restrictions, this is working fine.
- MyDepartment\Users: Private user folders where each user has full rights only to their specific folder, other users can only list the folders and files here, but no subfolders unless their own.
This is where i start to lose it.
I thought that anyone who created a folder or file was considered under NTFS the owner, but it seems it is not the case.
Anyone care to share some insights on the last part i am trying to accomplish?
Thanks.
↧
