Windows server 2016 share permission

Question

I have Windows server 2016 Standard version 1607 (OS Build 14393.5125) with share drive on the server example.

• D:\Company(Share permission for Users group in domain allow Change, Read)
• I have subfolder under D:\Company\test(This folder is not share and disable inheritance and Users group has no access to this folder only management group and administrator have accesd to this folder)
• On client computer(Joined domain) User does not have access to D:\Company\test but they can change folder permission by right click on the folder> Properties> Secutity then add themself to D:\Company\test.
• Is this a bug or am I missing something?

Answer 1

Hi @Anocha Yudhthonglang ,

I think you could check the ntfs permissions too.

https://learn.microsoft.com/en-us/iis/web-hosting/configuring-servers-in-the-windows-web-platform/configuring-share-and-ntfs-permissions#configuring-permissions

Check also user's premissions by using the Effective Access method.

Answer 2

@T. Kujala User does not have permission to access the folder. The issue here is they can right click on the folder> Properties> Secutity then add themself with permission to that folder.

Answer 3

Hello

Thank you for your question and reaching out. I can understand you are having issues related to share permissions.

I would suggest as a best practice try to give All Share Permission to users and then Control them by using NTFS permissions.

https://techcommunity.microsoft.com/t5/windows-server-for-it-pro/best-practices-sharing-folders-ntfs-share-permissions-and-the/m-p/673125

--If the reply is helpful, please Upvote and Accept as answer--

Answer 4

Any ideas about the Read permission and Change permission in the image? How can I get rid of it? The permission in the image was from user that is the member of Domain Users