Directory Share Permissions Question

Hello, Using MS server 2008 R2
On the server we have a "D:" drive with several NTFS shared directories that were setup by another team.
when I look at the share permissions, I see some that are Read/Write, and I see one called 'Contribute'.
what is the 'Contribute' permission?
Why would this be used instead of just Read/Write?
Thanks
MisterT99

Greetings!
It is a SharePoint related permission. Refer to the link below for more information:
Permission levels and permissions
Regards.
Mahdi Tehrani   |  
  |  
www.mahditehrani.ir
Please click on Propose As Answer or to mark this post as
and helpful for other people.
This posting is provided AS-IS with no warranties, and confers no rights.
How to query members of 'Local Administrators' group in all computers?

Similar Messages

  • Difference between Share Permissions and Security NTFS Folder Permissions

    What is the main difference between share and security in
    1. 2003 server and above:
    2. How in Organisations share data folder for users
    AS per me i Have following conclusion 
    1.
    Yes - Always open up Share permissions to Everyone-Full and the ACL (apply permissions) to the actual data
    folders (must be NTFS). With NT4 and W2000 you can leave the Share permissions at default when you create them and just ACL the NTFS data structures.
    With W2003, the default Share permission is locked down to Read, and as Share permissions over-ride NTFS permissions,
    even if you have Write access in the data folders, accessing via the Share will restrict to Read-Only, so you must open up the Share permissions on all new W2003 Shares that you create.
    2.
    Yes you can. Share the top level directory of your data. Open up the Share permissions to Everyone - Full,
    and then ACL the sub-folders appropriately for you different user access requirements. Don't permission (ACL) any data with 'Everyone' always use Groups (or users if you must...e.g. Home Directories), and at minimum for 'public' data use 'Authenticated Users'.
    Users will all be able to access the share, but only access folders and data that you allow via the NTFS permissions (ACLs).
    The only other way is to create separate shares for each different access requirement - a pain and none too
    flexible. Also if with W2K3 you leave the default Share permission (Read), even though you grant 'Write' NTFS permissions on the data, your users won't be able to write new data or make changes if they access via the Share, as Share permissions over-ride the
    NTFS permissions.
    If You have any other options so please suggest me or otherwise mark it as Answer 

    Sounds good. :)
    Arnav Sharma | http://arnavsharma.net/ Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading
    the thread.

  • UPS Service Account Replicate Directory Changes Permissions through AD group?

    I am trying to configure the UPS.
    Is it possible to grant the sync account SP-UPS Replicate Directory Changes permissions through an AD group or do these permissions need to be granted exclusively using ADSI edit?

    you can add a group or user name using the ADSI, that's what you want to know or something else?
    check the page 11 to 13 from the below white paper.
    http://download.microsoft.com/download/3/5/4/354670EE-4E80-4932-B1B6-CBCC3CD66444/oit2010-whitepaper-plan-deploy-user-profiles-mysites.doc
    Please remember to mark your question as answered &Vote helpful,if this solves/helps your problem. ****************************************************************************************** Thanks -WS MCITP(SharePoint 2010, 2013) Blog: http://wscheema.com/blog

  • How can I migrate file shares & permissions from one volume to another on the same server?

    I am replacing a storage array and as part of that process, I need to move files/folders and Shares/permissions from one Volume to another volume within the same server.
    The server is Windows 2003 file server.  The file transfers are not a problem, moving all 40 shares with permissions etc. is my main concern because in order to maintain everything I need to change the drive letter of the new volume to match the old
    one so that links to various resources throughout the network do not break.

    Hi, 
    If you want to copy files/folders from one Volume to another volume within the same server, you could use the File Server Migration Tool (FSMT) or Robocopy to accomplish your goals. The tool can move all of the files from the shares on your original volume
    to the new volume.
    For more detailed information, you could refer to the articles below:
    File Server Migration Toolkit
    http://technet.microsoft.com/en-us/magazine/2006.10.utilityspotlight.aspx
    The File Server Migration Toolkit (FSMT) is a free download available at:
    http://www.microsoft.com/en-us/download/details.aspx?DisplayLang=en&id=10268
    Robocopy
    http://technet.microsoft.com/en-us/library/cc733145.aspx
    FSMT and Robocopy will not copy Share permissions but only NTFS permissions. So if the drive letter will not be changed, you can backup and restore the Share permission with steps here:
    Saving and restoring existing Windows shares
    http://support.microsoft.com/kb/125996
    Regards, 
    Mandy
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

  • More than one network home directory? (newbie question)

    I have a brand new shiny XServer for a small school. They wanted their Macs managed and secured so I eagerly started moving ahead with it. Now, because of the specific file sharing requirements of the school (teachers want access to student accounts and files for homework and such) I created a standard, by-the-book Network Home folder. Then I thought about it, and I shared another directory as a Network User Home folder. And now none of my networked user accounts can log in. They all give me "can't log in, there is an error".
    Is what I did possible? Allowed? Recommended? Discouraged? Can you actually define two separate Network User Home folders on the same server, and then assign different users to different home folders? My server crapped out and now I may have to wipe/reinstall the whole thing to fix it.
    Does anybody have any experience with home folders like that?
    Any information would be dearly appreciated,
    Thanks.

    Each user can have one and only one home directory, network or local. (Yes, even if you use Mobile Accounts or Portable Homes each account still has one home directory. You just have multiple copies of the user account and each copy has one home.)
    You can have multiple share points that serve as home directory share points. In other words, not all of your users' homes need to be stored in the same place. By "network home directory share point," we mean a shared folder (share point) that has a corresponding dynamic automount record in the directory domain. The share point mounts at /Network/Servers/servername/path/to/sharepoint, and users defined in the directory domain can have their network homes defined there.
    If you want to grant a group of teachers (let's call it teachers for simplicity) read/write access to student home directories, I'd suggest the following strategy:
    1. Create two network home directory share points - one to house the students' homes and one to house the teachers' homes. For this example, let's say that the student home directory share point is located at /Volumes/Disk1/StudentHomes.
    2. Create home directories for each student as you normally would.
    3. Then add an ACL that allows members of the teachers group to read/write within the student home directory share point. For our example:
    sudo chmod -R +ai "group:teachers allow readattr,readextattr,readsecurity,list,search,\
    read,execute,writeattr,writeextattr,delete,deletechild,add_file,addsubdirectory,\
    write,append,fileinherit,directoryinherit" /Volumes/Disk1/StudentHomes.
    4. Now teachers simply navigate to /Network/Servers/yourservername/path.../StudentHomes/student's name and dig around to find what they want. (The teachers have read/write control of all student home directories now.)
    5. When your teachers find it a little inconvenient to dig around in each student's home, suggest the following alternative: Simply create a share point to which students have read-only access and teachers can read/write. Within that share point, create "turn-in" folders for each teacher or class, and give students write-only (drop box) permission to the sub-folder. You could get more granular than this simple example where all students can turn anything into any teacher's "turn-in" folder, though.
    --Gerrit

  • Share permissions issue - users reporting files readonly

    I have setup a share and the users need to have access to read,modify, write, delete on the files/folders in the new share. The users. For this:
    1. I added the user AD group to the Share Permissions and set 'Change' for the permissions. I noticed that there was already a group called Everyone here and had 'READ' permissions. I did not make any changes to this Everyone group.
    2. I added the user AD group to the NTFS Permissions and set 'Modify, Read&Execute, Read, Write' permissions. 
    It seems the users are seeing the files as 'read only'. They can view and open, but are not able to edit the file. What might be the issue?
    Regards

    Hi,
    I have added share and NTFS permissions the same as yours on a shared folder and I can eide files within the shared folder. Please check the NTFS permissions of the files in the shared folder to see it the NTFS permissions are inherited to the chiled files
    from the parent folder.
    HOW TO: Control NTFS Permissions Inheritance in Windows
    http://support.microsoft.com/kb/313398
    Best Regards,
    Mandy 
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

  • Clustered File share Permissions won't set (with error)

    I have a s2012r2 cluster with a file server. When i go to create a new share it creates with read only permissions and i cannot change it to full or read/write. it is just the share permissions that won't set. when i create a share the error i get is "The
    Cluster Resource could not be found." if i try to edit the share permissions the error is "Error Occurred while update an SMB share: The cluster resource could not be found" the admin share is working perfectly and the folder permissions are
    accurate. 
    The only solution to this problem i have found online that worked for someone is to destroy the cluster and rebuild it. I really don't want to do that.

    Hi RaVell(Pinki),
    This error typically occur when 
    we have added the Disk from Available Storage to the File Share Server Group, please refer the following KB solution to avoid this action.
    You may receive error messages when you share a folder in a Windows Server 2008 failover cluster
    http://support.microsoft.com/kb/947051
    More information:
    Advanced resource configuration in Windows Server 2008 failover clusters
    http://support.microsoft.com/kb/947050
    I’m glad to be of help to you!
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • Mass movement of network file shares removed SHARE permissions

    We had a 10 year old server that had two iscsi drives containing all our company's shared file storage, about 2.5 TBs.
    A couple of days ago, we had to move those iscsi drives to a new server in order to retire the old server.
    Through previous experience, we were prepared for the loss of our "shares" but not the loss of our security permissions.  We documented every share and who had permissions to each folder. We were not surprised that this indeed occurred.
    As we were manually and hurriedly reapplying share permissions, we couldn't help but ask ourselves, "what does a company like Boeing do in a case such as this?"
    For our company, it took two people only about 45 minutes to complete the job but we are growing. In the future, is there a more automated procedure we could do instead of the manual flurry to quickly reset shares and their permissions after moving
    iscsi shared files and folders to another server?
    Please have an answer for us and thanks for your time.
    Sue

    Hi Sue,
    NTFS permission is on file/folder so we could migrate it with files/folders.
    However Share permission is stored in registry key:
    SYSTEM\CurrentControlSet\Services\LanmanServer\Shares
    If the path of all folders will not be changed, you can output and import the key to the new server directly.
    If path will be changed, you will need to modify the keys before import. 
    If you have any feedback on our support, please send to [email protected]

  • SCCM 2012 R2 and NTFS\Share permissions auditing and inventory

    Does SCCM 2012 have the ability to run inventory and audit reports on client systems' NTFS and Share permissions?
    Any help would be greatly appreciated, as always. 
    Thanks

    Not built-in no. See this post for adding share permissions:
    https://social.technet.microsoft.com/Forums/systemcenter/en-US/31be4d1c-28d3-4f67-a2f6-823ab2b13d1e/how-to-collect-share-permissions
    For NTFS permissions, something similar could be done if you had a limited set of folders or files that you wanted to inventory.
    You could also use compliance settings to track if/when specific permissions change.
    Jason | http://blog.configmgrftw.com | @jasonsandys

  • Unable to modify share permissions by command

    Hi Folks,
    Im trying to modify my existing share permissions by the net share command, but im unable to complete it.
    NET SHARE
    sharename
              sharename=drive:path [/GRANT:user,[READ | CHANGE | FULL]]
                                   [/USERS:number | /UNLIMITED]
                                   [/REMARK:"text"]
                                   [/CACHE:Manual | Documents| Programs | BranchCache | None]
              sharename [/USERS:number | /UNLIMITED]
                        [/REMARK:"text"]
                        [/CACHE:Manual | Documents | Programs | BranchCache | None]
              {sharename | devicename | drive:path} /DELETE
              sharename \\computername /DELETE
    Is there any suggestion how can this be accomplished by a cmd session?
    Cheers, Alan.

    Hi Alan,
    You can use the subinacl command below to modify share permissions.
    subinacl.exe /share "TheShare" /grant=<Domain>\<UserOrGroup>=<Permission>
    For more detailed information, please see:
    SubInACL (SubInACL.exe)
    https://www.microsoft.com/en-us/download/details.aspx?id=23510
    Dive Deep with SubInACL
    http://redmondmag.com/articles/2008/03/01/dive-deep-with-subinacl.aspx
    Please Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there.
    Best Regards,
    Mandy
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

  • SCCM 2012 report on computers with local shares and share permissions

    Very new to SCCM 2012, want to put together a report to show computers with local shares and the permissions on those shares (for security purposes, need to investigate any systems that have open shares_.
    Managed to add and now collecting information that populates v_gs_share and I have a handle on the report itself, just wondering how to collect the share permissions - I've seen other qustions on the boards that are similar but reference earlier versions
    of SCCM so wondering how to do it in 2012.
    Thanks

    So, where are you at?  The script is running, and the clients have the data in their local WMI namespace, root\cimv2\sms_sharepermissions ?
    So all that's left is to modify hardware inventory to pull that custom WMI Namespace in?  If so, it's not too horrid.  Take note of a workstation (or server) to which you have remote rights to; and which has run the script, so that on THAT specific
    machine, root\cimv2\SMS_SharePermissions exists.
    In your CM12 Console, Administration, Client Settings.  Right-click "Default Client Settings", Properties.  On the left, select "hardware inventory".  then on the right, Set classes..., now the fun part.
    Add...
    Connect..., and put in ThatServerOrWorkstation (for computername), and wmi namespace is root\cimv2.  Click the option "recursive", Connect.  (the trick here is rights to the target).
    From the results, it might be easiest to click on "classname" at the top for sorting, then go find SMS_SharePermissions.  Select that, ok ok ok ok (however many times you need to agree); and... we're done here.  Sit and wait for inventory to report
    that data up.  If you're paranoid, you can monitor dataldr.log; and force policy refreshes and hinv deltas on some boxes; but the key is patience.  if you think you've waited long enough; you probably haven't.  ;)
    Standardize. Simplify. Automate.

  • Printer Share permissions

    I'm trying to modify the share permissions for a printer share in server 2008r2.  On the share tab we have  a check box for share printer.  No permissions tab.  I would like to remove the everyone permission from the share permissions. 
    Folder shares has a share permissions tab, why not printer shares.

    Hi,
    As Yagmoth555 mentioned, if you want to set permissions for a shared printer, you should click
    Properties, and then click the Security tab. For details, please refer to the following article.
    Set or remove permissions for a printer
    http://technet.microsoft.com/en-us/library/cc738233(v=ws.10).aspx
    Best Regards,
    Andy Qi
    TechNet Subscriber Support
    If you are
    TechNet Subscription user and have any feedback on our support quality, please send your feedback
    here.
    Andy Qi
    TechNet Community Support

  • Best way to replicate a directory share to a new Windows 2012 serv, keeping all permissions and timestamps the same?

    We have a legacy Windows 2008 R2 server, with a single network share on it, that was acting as a primary file share.   Inside the network share are about a dozen different folders (with subfolders) all with different permissions applied to them at the
    folder and file level.   
    I want to migrate/copy this entire directory structure to a new Windows 2012 Standard server, keeping all the timestamps, permissions, etc. exactly as they are on the old directory structure.  Both servers are part of the same single Windows 2008 R2
    domain.
    What would the best practice method for achieving this?  Using XCopy?   If so, what syntax would I want to use with the command to make sure I don't lose any permissions or change any data and timestamps during the migration?

    Hi 
    I recommend you use robocopy to accomplish it.
    Technet Guide for robocopy command:http://technet.microsoft.com/en-us/library/cc733145(v=ws.10).aspx
    Microsoft RoboCopy GUI tool. Tool
    link: http://www.myitforum.com/articles/15/view.asp?id=9433
    Note: Its always good test in test environment, before applying it to production servers
    Regards, Ravikumar P

  • Library Share Permissions and Ohter Questions

    I am setting up Library Server and want to know little bit about it:
    1.  What are the permissions required on the share of library server? which service accounts, computer accounts or cluster objects to add? and what permissions?
    2.  Is there any limitation with respect to name of the share that it should not have any spaces in the name?
    3.  Is there any limitation as how many folders inside a folder would be listed in the console?  I have around four folders inside the main shared folder and only two are showing in the console.  Can it only contain packages or single file
    and not extracted ISO images?  The folders inside the main shared folder that is showing only shows bit of the actual content of the folder.
    Thanks in advance.

    Thanks for the replies.
    1.  But, when we create a folder and share it to be seen by the VMM Console, with what permission should be shared i.e. everyone read only or vmm admin account read only, etc.
    2.  So, it is better to use underscores on all folders at least just to be safe.  correct me if I am wrong.
    3.  Actually, I have made a folder of Setups which has folders like applications, operating systems and drivers, etc. folders with respective content in them.  When I am adding it as library share, it shows some of
    the content not all of it.  Should I just add .cr to the parent Setup folder or all the folders inside it?

  • How to set NTFS and share permissions for Users share for home directories in Server 2012

    I have a new Server 2012 server, and I want to set up a Users share, that will contain subfolders of each user's username and contain their home directory.  But what do I set the share and NTFS permissions as on the root level, lets call the folder
    Users? Is the following older article the correct permissions I need?
    https://support.microsoft.com/kb/274443

    Hi RJO22,
    You can choose configure the Folder Redirection, Folder Redirection enables you to redirect the location of specific folders within user profiles to a new location, such as
    a shared network location. Folder redirection is used in the process of administering user profiles and roaming user profiles. You can configure Folder Redirection using the Group Policy Management Console to redirect specific user profile folders, as well
    as edit Folder Redirection policy settings.
    The related KB:
    Folder Redirection Overview
    http://technet.microsoft.com/en-us/library/cc732275.aspx
    Specify the Location of Folders in a User Profile
    http://technet.microsoft.com/en-us/library/cc771969.aspx
    I’m glad to be of help to you!
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

Maybe you are looking for