Correct File Security / Sharing Permissions

[smitty870]

I am having difficulty setting up an advanced file sharing setup with Windows 7 x64 acting as the host machine.

I have 3 users that i want to access the share.
User1 = Full Rights
User2, User3 = ability to run and execute all folders, but only write, modify their own folders.

Directory tree is following:
Root (shared as data1)
---Folder1+additional sub-folders (user1 full access, user2+3, read only)
---Folder2+additional sub-folders (user1 full access, user2+3, read only)
---Folder2+additional sub-folders (user1 full access, user2+3, read only)
---Folder3+sub-folder1 (user1 full access, user2+3, read only)
---Folder3+sub-folder2 (User1+2 Full Access, user3 read only)
---Folder3+sub-folder3 (User1+3 Full Access, user2 read only)

The only way I've been able to give give users 2,3 ability to edit their own folders is to give them read/write access to shared dir data1.

I've tried messing with security and sharing, but not having much luck.

 

[James Colbert]

Hi smitty. Welcome to the forums .

You could specifically deny access to those users or the group they belong to:

http://www.sevenforums.com/tutorials/122666-permissions-allow-deny-users-groups.html

Take heed of the big red warning notes about denying access to your user account or the group you belong to. If you deny access to the specified user's group and it is a group you belong to, you will lock yourself out.

You could make User1 and admin and make user 2 & 3 standard accounts and control the folders via the user groups.

You may also find additional helpful info via the related links at the bottom of the tut. Educate yourself well on the matter, as mistakes can cost you time and data. Plus you increase the chances that you will make use of the method that works best for your situation.

Also, before changing permissions, you will serve yourself well to create an image of your system partition, as System Restore will not revert permissions. If you have a system drive image and need to restore, you can be back where you started in minutes, all mistakes gone. Many here recommend the free Macrium Reflect. I use Acronis True Image 2011 and am quite happy with it (been using it for years).

 

[smitty870]

yeah I always backup first, but I prefer to drive myself crazy figuring out what I screwed up so I don't do it again.
When I was messing with the permissions I really screwed up something that is for sure! Now I keep getting recycle bin corrupted errors whenever I try to delete something from the remote computer. I also when trying to sync keep getting file access error to file $asdjfxhmasd in \192168.10.10\user1\pictures\$RECYCLE.BIN which I thought the recycle bin was on the root of the drive. I think at this point it's time to start over as I really fubared my security permissions etc...

 

[James Colbert]

This thread may be of use, although if you're not too invested in your current install, it may indeed be easier to reinstall. But still, the link below has a lot of good advice that could be beneficial in the future:

http://www.sevenforums.com/system-security/169551-security-permission-problems.html#post1448319

 

[smitty870]

Thank you again for the assist! I ended up not restoring, what I did was I went with everyone for read, control access via sharing then for file security administrators to all folders full control, authenticated users as list, execute for all folders. I removed authenticated users from the personal user folders and added the individual users to their own folder as full access. Everything seems to be working as I I figured out what was wrong with my recycle bin also. It appears that my offline cache had been corrupted somehow. I think what happened is one of the workstations had that user online when I screwed up permissions. I found this post: Sync Error with offline files of mapped network drive involving recycle.bin (5th post on page), which tells you how to clear your offline cache via the registry. I tried clear via delete temp files and disabling, enabling offline files which didn't work. Everything appears to be working again.

 

[James Colbert]

Thanks for the update !