windows server 2003 R2 permissions

[zombine210]

halp! i think i screwed up my permissions!

i set the root Data drive F: security to full control for the following:

local admin
myself
system

then i created a folder with share permissions for everybody to full control, and security full control for the same as above.

the problem is i can only access those folders but nothing else inside using local admin, it says access denied. i can acccess inside through network shares. when i click security it says " you do not have permission setting, but you can take ownership"

i've done a few folders this way an i can access them, but i want to do it for all folders and files. how can i get in using the local admin?? it's set to full control?

thanks,

 

[Geoff]

What did you set the NTFS permissions to?

 

[zombine210]

What did you set the NTFS permissions to?

those are the security settings right?
its set to full control for: local admin, myself & SYSTEM.

i also have checked allow inheritable permissions from the parent to propagate...

wait will checking the replace permissions entries on all child objects... fix all the folders and files inside the main share?


im going to try it

 

[zombine210]

i had a whole bunch of access denied.

man, what did i screw up now?

 

[Geoff]

those are the security settings right?
its set to full control for: local admin, myself & SYSTEM.

i also have checked allow inheritable permissions from the parent to propagate...

wait will checking the replace permissions entries on all child objects... fix all the folders and files inside the main share?


im going to try it

There are NTFS permissions and share permissions that need to be set. Chances are your NTFS permissions aren't correct.

 

[zombine210]

There are NTFS permissions and share permissions that need to be set. Chances are your NTFS permissions aren't correct.

where do i set those??

 

[Geoff]

where do i set those??

Right click on the share/folder > Properties > Then check the permissions under the "Sharing" tab, as well as under "Security".

 

[zombine210]

yeah, but waht do i set them to?

 

[Geoff]

Set them to whatever you want to give a user(s) read, write, or modify permission for.

 

[zombine210]

ok i fixed it!
perhaps i didn't explain this well. here's what happened. i shared the top folder for all my accounts so i was able to access over the network, but not locally, got access denied errors.

turns out the owner entry was blank on all subfolders
so i went to the top folder> properties> security> advanced> owner and checked: Replace owner on subfolders and objects. i got a permission denied, but clicked yes and it did it's thing. success! i was able to enter and view all subfolders.

then i went to the permissions tab and checked: Replace permissions on all child objects shown here.." success! all my users have full control locally and over net.

QuestioN: does the user SYSTEM need to have full control? or is it enough to have local admin full control. i imagine the system needs control for the antivirus, right?

tahnks,!

edit: also, i set the owner to local admin. is this good enough, or should i set it to system? who should be the owner for the share?

thanks!