locked
DFS Share Folder Permission RRS feed

  • Question

  • HI All,

      I have create new Share for Finance and sub folders for each sections. So how do i set the permission for following folders?

    Server is Windows 2012 r2 

       \\Domain\CorpShare\Finance  - (Only Finance Team can access hide from all others )

                        -AP ( Only AP Members can see rest is hide )

                        -AR ( Only AR Members can see rest is hide)

                        -Payroll Only payroll Members can see rest is hide)

                       - General ( All Team can see this 

    AS

    Monday, February 22, 2016 5:28 AM

Answers

  • Hi As,

    Thanks for your reply.

    As I said before, you could go the local path for the folder to set the folder permission.

    For example, the namespace path is \\Example\CropShare\Finance (where Finace the real location is in server1 G:\share\Finance). You go to the G drive find the folder Finance to set related share and NTFS permission.

    Best Regards,

    Mary Dong


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.


    • Edited by Mary Dong Tuesday, February 23, 2016 5:04 AM
    • Proposed as answer by Mary Dong Tuesday, March 8, 2016 1:32 AM
    • Marked as answer by Mary Dong Friday, March 11, 2016 1:13 AM
    Tuesday, February 23, 2016 5:04 AM

All replies

  • Hi AUSSUPPORT,

    Thanks for your post.

    The final access permissions on a shared folder are determined by taking into consideration both the share permission and the NTFS permission entries. You can set share permissions to Full Control for the Everyone group and to rely entirely on NTFS permissions to restrict access. In fact the permission is still set on the folder.

    For example, your folder Finance is in your server 2012r2 G:\share, you still need to set on the G:\share\Finance. It is the same  for other folders.
     For more detailed information, please refer to the article below:

    Share and NTFS Permissions on a File Server
    http://technet.microsoft.com/en-us/library/cc754178.aspx

    Does a DFS namespace have its own permissions?

    https://blogs.technet.microsoft.com/filecab/2006/08/09/does-a-dfs-namespace-have-its-own-permissions/

    For enable Access-based enumeration hide files and folders that users do not have permission to access

    You could check the articles below

    https://msdn.microsoft.com/en-us/library/dd759150.aspx

    Best Regards,

    Mary Dong


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Tuesday, February 23, 2016 2:07 AM
  • Hi Mary,

       Thanks for your reply and read all of the links. I have create the DFS namespace. due to Windows 2000 Domain Functional level i can not enable the windows 2008 mode and enable ABE on Namespace on my windows 2012 R2 Server.

    First basic question : Do I setup permissions on the Server manager shares or the share permissions in DFS Management?

    Domain = "Example.com"
    DFS Root = "CorpShare" Share Security Everyone {Read} /SVR1/adminsistrators {Full}
    NTFS Security SVR1/Administrator {Full Control}
    System {Full Control}
    Authenticated Users {Read & Execute to this folder only}

    DFS Link Referral = "Finance" Share Security Everyone {Full} SVR1/administrators {Full}
    NTFS Security Administrators {Full Control}
    System {Full Control}
    Finance Users Security Group { Modify}

    \\Example\CropShare\Finance

    As


    • Edited by AUSSUPPORT Tuesday, February 23, 2016 4:48 AM
    Tuesday, February 23, 2016 4:41 AM
  • Hi As,

    Thanks for your reply.

    As I said before, you could go the local path for the folder to set the folder permission.

    For example, the namespace path is \\Example\CropShare\Finance (where Finace the real location is in server1 G:\share\Finance). You go to the G drive find the folder Finance to set related share and NTFS permission.

    Best Regards,

    Mary Dong


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.


    • Edited by Mary Dong Tuesday, February 23, 2016 5:04 AM
    • Proposed as answer by Mary Dong Tuesday, March 8, 2016 1:32 AM
    • Marked as answer by Mary Dong Friday, March 11, 2016 1:13 AM
    Tuesday, February 23, 2016 5:04 AM