Hello all,

I have a domain where the PDC/BDC are both on NT4.0. There is a file server which is on Win 2000 Server. The shared folders in this server has rights for one user (who ever logs in with this user name and password) who can only read the files or copy them to another machine on the network if necessary. So far only two users are set up to have the write previledges on this shared folders. One is the domain administrator and the other is myself. I am trying to add a third user who will have read/write previledges in these shared folders but will not have admin rights for the domain.

I added this user in the PDC as a special user with read/write preveledges and then on the file server I added him as a user (with same name) that has all the rights like myself. However, If I log in as him from another machine, no write previledges are granted. It only allows to read.

What am I missing? Can anyone help?

Sorry for the slow response but I think that other members may have been a little confused by this thread like myself. I have the same setup at the office - an NT4 PDC and numerous Win2000 member servers (file server, web server, database server, etc).

The main area where people get themselves in a pickle regarding security is when they use the Security tab on the folder AND the Sharing tab to both control permissions. If you've set read/write access in the Security tab but you've still got the folder shared with only read access in the Sharing tab, then the lowest privilege always prevails. In other words, if your folder is only shared as read-only, then you could give everyone Full Control in the Security tab and it wouldn't make any difference - they still wouldn't be able to write to the folder.

Microsoft best practices recommend that, on an NTFS drive, you use the Security tab to set all of your permissions and the Sharing tab simply to note the share name. You should only set restrictive user permissions on the Sharing tab if you are using a FAT32 drive, as FAT32 doesn't support the Security tab.

Hope that clears things up. If that's nothing to do with your problem and I've made the wrong assumption, let me know and I'll come up with something else!

Thanks DJ.

I did figure out the problem just a day before your reply by doing a comparison between my profile and the new user's profile. What you say is is exactly what I did.

AndyS

Cool - glad you got it sorted