Windows 2000 permissions help!!

  1. #1
    Ipswichlad83 is offline Newbie

    Windows 2000 permissions help!!

    Having a few issues with the my server and I hope someone can help...

    Basically I went to change the Permissions to one of the drives on the server so that Domain users can deletes files themselves. I did this I thought all was ok until when I went back into the drive permissions and all the users had been deleted apart from 'Domain users'. This means that profiles like 'Administrator' and 'Local users' are no longer showing in the user rights screen.
    Now I realised my mistake and went to put theses back in with there relevant permission but when I try to apply these setting the screen just freezes and the program stops operating. First I though this might have been because I was doing it remotely so I went to the Server itself to change this but I just get the same problem. Was it doing this because people were using files on the drive @ the time or do I need to log off the server and Log back on as one of the domain
    Users ‘I am currently logged on as 'Administrator'.
    Any other ideas would be much appreciated!
    Thanks in advance!!


  2. #2
    DJNafey is offline UK site moderator
    HI Ipswichlad83. I'm a network administrator in Sussex and we have a number of Win2000 servers. I don't have one in front of me now as I'm at home but, from memory, it sounds to me like you've un-checked the option to keep inheritable permissions from a higher level. Although I'm not sure what the higher level can be if you're selecting an entire drive! Or are you just selecting the folders within the drive?

    The basic process of setting permissions is:

    1. View the Permissions tab at the highest level at which you want the permissions to take effect.
    2. Take note of whether this folder(s) has inherited permissions from a higher level and decide whether you want to keep them. If you do not keep permissions inherited from a higher level, then you'll need to make sure that you add ALL appropriate users and groups into your new permissions settings, not just the user/group that you want to change.
    3. Set the permissions appropriately, making sure that appropriate groups (such as Administrators and/or Domain Admins) have Full Control.
    4. Decide whether you want the updated permissions to cascade to lower folders (can't remember exactly how it's worded on the screen but it will say something about "child files/folders" I think).
    5. Once the Permissions are set, bear in mind that this is the access that you've defined as if the users and groups were actually sitting at the server itself. In order to make these files and folders available over the network, you also have to set the users and groups in the Sharing tab. It is common practice (and recommended by Microsoft) to simply allow 'Full Control' to 'Authenticated Users' (or a similar group) in the Sharing tab. Don't try to define permissions in the Sharing tab - (a) it's a waste of time ... and (b) you'll get yourself (and any network administrator that takes over from you) very confused!

    Sorry it has taken a couple of days to respond to this. Hope I've been able to help

  3. #3
    Ipswichlad83 is offline Newbie
    Thanks for the response!
    I had gathered that this is what I had done because on the other shared drive on the server this box is ticked. When I try to correct this by 're-checking' the box and apply the setting the window freezes and the program stops responding. Do you think i will have to log on locally into the machine to change this setting? There isn't a problem with changing permission on folders etc and this is why this seems a very strange problem.
    By the way I got a bit mixed up with another server we have and it is actually a Windows 2003 server that the problem occurs on. Sorry for the confusion.

+ Reply to Thread