Share via

DFS Share Folder Permission

  • Article

Question

Monday, February 22, 2016 5:28 AM

HI All,

  I have create new Share for Finance and sub folders for each sections. So how do i set the permission for following folders?

Server is Windows 2012 r2 

   \Domain\CorpShare\Finance  - (Only Finance Team can access hide from all others )

                    -AP ( Only AP Members can see rest is hide )

                    -AR ( Only AR Members can see rest is hide)

                    -Payroll ( Only payroll Members can see rest is hide)

                   - General ( All Team can see this 

AS

All replies (3)

Tuesday, February 23, 2016 5:04 AM âś…Answered

Hi As,

Thanks for your reply.

As I said before, you could go the local path for the folder to set the folder permission.

For example, the namespace path is \Example\CropShare\Finance (where Finace the real location is in server1 G:\share\Finance). You go to the G drive find the folder Finance to set related share and NTFS permission.

Best Regards,

Mary Dong

Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected].

Tuesday, February 23, 2016 2:07 AM

Hi AUSSUPPORT,

Thanks for your post.

The final access permissions on a shared folder are determined by taking into consideration both the share permission and the NTFS permission entries. You can set share permissions to Full Control for the Everyone group and to rely entirely on NTFS permissions to restrict access. In fact the permission is still set on the folder.

For example, your folder Finance is in your server 2012r2 G:\share, you still need to set on the G:\share\Finance. It is the same  for other folders.
 For more detailed information, please refer to the article below:

Share and NTFS Permissions on a File Server
http://technet.microsoft.com/en-us/library/cc754178.aspx

Does a DFS namespace have its own permissions?

https://blogs.technet.microsoft.com/filecab/2006/08/09/does-a-dfs-namespace-have-its-own-permissions/

For enable Access-based enumeration hide files and folders that users do not have permission to access

You could check the articles below

https://msdn.microsoft.com/en-us/library/dd759150.aspx

Best Regards,

Mary Dong

Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected].

Tuesday, February 23, 2016 4:41 AM

Hi Mary,

   Thanks for your reply and read all of the links. I have create the DFS namespace. due to Windows 2000 Domain Functional level i can not enable the windows 2008 mode and enable ABE on Namespace on my windows 2012 R2 Server.

First basic question : Do I setup permissions on the Server manager shares or the share permissions in DFS Management?

Domain = "Example.com"

DFS Root = "CorpShare" Share Security Everyone {Read} /SVR1/adminsistrators {Full}

                     NTFS Security  SVR1/Administrator {Full Control} 

                                    System {Full Control} 

                                    Authenticated Users {Read & Execute to this folder only}


DFS Link Referral = "Finance" Share Security Everyone {Full} SVR1/administrators {Full}

                                      NTFS Security  Administrators {Full Control} 

                                      System {Full Control} 

                                      Finance Users Security Group { Modify}


\\Example\CropShare\Finance   As