Share Permissions

Hi,
So I have a Win 2008 R2 server in a workgroup which I log onto with a local administrator account. From that machine and logon I want to connect to a file share on a Win 2012 R2 server connected to a domain. Network connectivity is in place. Is
this possible?
So far I have tried to use the 'Everyone' and 'Anonymous Logon' group for the Share and NTFS permissions, but no luck.
I know that I could create a new domain user and use that to permission the share, but that would require me to enter those credentials on my Win 2008 R2 server for access. What I am really looking for is a share with fully open permissions,
so that anyone in the connected network segment can access. I have separate VLANs so security is not an issue.
Can anyone tell me if there is a group \ alternative way of doing this to get it working?
Thanks.

Hi Steve,
Please check these steps and feel free to post back the result:
1.  Enable the guest account
2.  Add the everyone group to both the share and the security permissions.
3.  Open the Local Security Policy
4.  Network Access:  Let Everyone permissions apply to anonymous users = Enabled
5.  Network Access:  Named Pipes that can be accessed anonymously = (add)
sharename
6.  Network Access:  Restrict anonymous access to Named Pipes and Shares = Disabled
7.  Network Access:  Shares that can be accessed anonymously = (add)
sharename
Best Regards,
Anna Wang
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Similar Messages

  • How can I migrate file shares & permissions from one volume to another on the same server?

    I am replacing a storage array and as part of that process, I need to move files/folders and Shares/permissions from one Volume to another volume within the same server.
    The server is Windows 2003 file server.  The file transfers are not a problem, moving all 40 shares with permissions etc. is my main concern because in order to maintain everything I need to change the drive letter of the new volume to match the old
    one so that links to various resources throughout the network do not break.

    Hi, 
    If you want to copy files/folders from one Volume to another volume within the same server, you could use the File Server Migration Tool (FSMT) or Robocopy to accomplish your goals. The tool can move all of the files from the shares on your original volume
    to the new volume.
    For more detailed information, you could refer to the articles below:
    File Server Migration Toolkit
    http://technet.microsoft.com/en-us/magazine/2006.10.utilityspotlight.aspx
    The File Server Migration Toolkit (FSMT) is a free download available at:
    http://www.microsoft.com/en-us/download/details.aspx?DisplayLang=en&id=10268
    Robocopy
    http://technet.microsoft.com/en-us/library/cc733145.aspx
    FSMT and Robocopy will not copy Share permissions but only NTFS permissions. So if the drive letter will not be changed, you can backup and restore the Share permission with steps here:
    Saving and restoring existing Windows shares
    http://support.microsoft.com/kb/125996
    Regards, 
    Mandy
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

  • Share permissions issue - users reporting files readonly

    I have setup a share and the users need to have access to read,modify, write, delete on the files/folders in the new share. The users. For this:
    1. I added the user AD group to the Share Permissions and set 'Change' for the permissions. I noticed that there was already a group called Everyone here and had 'READ' permissions. I did not make any changes to this Everyone group.
    2. I added the user AD group to the NTFS Permissions and set 'Modify, Read&Execute, Read, Write' permissions. 
    It seems the users are seeing the files as 'read only'. They can view and open, but are not able to edit the file. What might be the issue?
    Regards

    Hi,
    I have added share and NTFS permissions the same as yours on a shared folder and I can eide files within the shared folder. Please check the NTFS permissions of the files in the shared folder to see it the NTFS permissions are inherited to the chiled files
    from the parent folder.
    HOW TO: Control NTFS Permissions Inheritance in Windows
    http://support.microsoft.com/kb/313398
    Best Regards,
    Mandy 
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

  • Clustered File share Permissions won't set (with error)

    I have a s2012r2 cluster with a file server. When i go to create a new share it creates with read only permissions and i cannot change it to full or read/write. it is just the share permissions that won't set. when i create a share the error i get is "The
    Cluster Resource could not be found." if i try to edit the share permissions the error is "Error Occurred while update an SMB share: The cluster resource could not be found" the admin share is working perfectly and the folder permissions are
    accurate. 
    The only solution to this problem i have found online that worked for someone is to destroy the cluster and rebuild it. I really don't want to do that.

    Hi RaVell(Pinki),
    This error typically occur when 
    we have added the Disk from Available Storage to the File Share Server Group, please refer the following KB solution to avoid this action.
    You may receive error messages when you share a folder in a Windows Server 2008 failover cluster
    http://support.microsoft.com/kb/947051
    More information:
    Advanced resource configuration in Windows Server 2008 failover clusters
    http://support.microsoft.com/kb/947050
    I’m glad to be of help to you!
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • Directory Share Permissions Question

    Hello, Using MS server 2008 R2
    On the server we have a "D:" drive with several NTFS shared directories that were setup by another team.
    when I look at the share permissions, I see some that are Read/Write, and I see one called 'Contribute'.
    what is the 'Contribute' permission?
    Why would this be used instead of just Read/Write?
    Thanks
    MisterT99

    Greetings!
    It is a SharePoint related permission. Refer to the link below for more information:
    Permission levels and permissions
    Regards.
    Mahdi Tehrani   |  
      |  
    www.mahditehrani.ir
    Please click on Propose As Answer or to mark this post as
    and helpful for other people.
    This posting is provided AS-IS with no warranties, and confers no rights.
    How to query members of 'Local Administrators' group in all computers?

  • Mass movement of network file shares removed SHARE permissions

    We had a 10 year old server that had two iscsi drives containing all our company's shared file storage, about 2.5 TBs.
    A couple of days ago, we had to move those iscsi drives to a new server in order to retire the old server.
    Through previous experience, we were prepared for the loss of our "shares" but not the loss of our security permissions.  We documented every share and who had permissions to each folder. We were not surprised that this indeed occurred.
    As we were manually and hurriedly reapplying share permissions, we couldn't help but ask ourselves, "what does a company like Boeing do in a case such as this?"
    For our company, it took two people only about 45 minutes to complete the job but we are growing. In the future, is there a more automated procedure we could do instead of the manual flurry to quickly reset shares and their permissions after moving
    iscsi shared files and folders to another server?
    Please have an answer for us and thanks for your time.
    Sue

    Hi Sue,
    NTFS permission is on file/folder so we could migrate it with files/folders.
    However Share permission is stored in registry key:
    SYSTEM\CurrentControlSet\Services\LanmanServer\Shares
    If the path of all folders will not be changed, you can output and import the key to the new server directly.
    If path will be changed, you will need to modify the keys before import. 
    If you have any feedback on our support, please send to [email protected]

  • SCCM 2012 R2 and NTFS\Share permissions auditing and inventory

    Does SCCM 2012 have the ability to run inventory and audit reports on client systems' NTFS and Share permissions?
    Any help would be greatly appreciated, as always. 
    Thanks

    Not built-in no. See this post for adding share permissions:
    https://social.technet.microsoft.com/Forums/systemcenter/en-US/31be4d1c-28d3-4f67-a2f6-823ab2b13d1e/how-to-collect-share-permissions
    For NTFS permissions, something similar could be done if you had a limited set of folders or files that you wanted to inventory.
    You could also use compliance settings to track if/when specific permissions change.
    Jason | http://blog.configmgrftw.com | @jasonsandys

  • Unable to modify share permissions by command

    Hi Folks,
    Im trying to modify my existing share permissions by the net share command, but im unable to complete it.
    NET SHARE
    sharename
              sharename=drive:path [/GRANT:user,[READ | CHANGE | FULL]]
                                   [/USERS:number | /UNLIMITED]
                                   [/REMARK:"text"]
                                   [/CACHE:Manual | Documents| Programs | BranchCache | None]
              sharename [/USERS:number | /UNLIMITED]
                        [/REMARK:"text"]
                        [/CACHE:Manual | Documents | Programs | BranchCache | None]
              {sharename | devicename | drive:path} /DELETE
              sharename \\computername /DELETE
    Is there any suggestion how can this be accomplished by a cmd session?
    Cheers, Alan.

    Hi Alan,
    You can use the subinacl command below to modify share permissions.
    subinacl.exe /share "TheShare" /grant=<Domain>\<UserOrGroup>=<Permission>
    For more detailed information, please see:
    SubInACL (SubInACL.exe)
    https://www.microsoft.com/en-us/download/details.aspx?id=23510
    Dive Deep with SubInACL
    http://redmondmag.com/articles/2008/03/01/dive-deep-with-subinacl.aspx
    Please Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there.
    Best Regards,
    Mandy
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

  • SCCM 2012 report on computers with local shares and share permissions

    Very new to SCCM 2012, want to put together a report to show computers with local shares and the permissions on those shares (for security purposes, need to investigate any systems that have open shares_.
    Managed to add and now collecting information that populates v_gs_share and I have a handle on the report itself, just wondering how to collect the share permissions - I've seen other qustions on the boards that are similar but reference earlier versions
    of SCCM so wondering how to do it in 2012.
    Thanks

    So, where are you at?  The script is running, and the clients have the data in their local WMI namespace, root\cimv2\sms_sharepermissions ?
    So all that's left is to modify hardware inventory to pull that custom WMI Namespace in?  If so, it's not too horrid.  Take note of a workstation (or server) to which you have remote rights to; and which has run the script, so that on THAT specific
    machine, root\cimv2\SMS_SharePermissions exists.
    In your CM12 Console, Administration, Client Settings.  Right-click "Default Client Settings", Properties.  On the left, select "hardware inventory".  then on the right, Set classes..., now the fun part.
    Add...
    Connect..., and put in ThatServerOrWorkstation (for computername), and wmi namespace is root\cimv2.  Click the option "recursive", Connect.  (the trick here is rights to the target).
    From the results, it might be easiest to click on "classname" at the top for sorting, then go find SMS_SharePermissions.  Select that, ok ok ok ok (however many times you need to agree); and... we're done here.  Sit and wait for inventory to report
    that data up.  If you're paranoid, you can monitor dataldr.log; and force policy refreshes and hinv deltas on some boxes; but the key is patience.  if you think you've waited long enough; you probably haven't.  ;)
    Standardize. Simplify. Automate.

  • Difference between Share Permissions and Security NTFS Folder Permissions

    What is the main difference between share and security in
    1. 2003 server and above:
    2. How in Organisations share data folder for users
    AS per me i Have following conclusion 
    1.
    Yes - Always open up Share permissions to Everyone-Full and the ACL (apply permissions) to the actual data
    folders (must be NTFS). With NT4 and W2000 you can leave the Share permissions at default when you create them and just ACL the NTFS data structures.
    With W2003, the default Share permission is locked down to Read, and as Share permissions over-ride NTFS permissions,
    even if you have Write access in the data folders, accessing via the Share will restrict to Read-Only, so you must open up the Share permissions on all new W2003 Shares that you create.
    2.
    Yes you can. Share the top level directory of your data. Open up the Share permissions to Everyone - Full,
    and then ACL the sub-folders appropriately for you different user access requirements. Don't permission (ACL) any data with 'Everyone' always use Groups (or users if you must...e.g. Home Directories), and at minimum for 'public' data use 'Authenticated Users'.
    Users will all be able to access the share, but only access folders and data that you allow via the NTFS permissions (ACLs).
    The only other way is to create separate shares for each different access requirement - a pain and none too
    flexible. Also if with W2K3 you leave the default Share permission (Read), even though you grant 'Write' NTFS permissions on the data, your users won't be able to write new data or make changes if they access via the Share, as Share permissions over-ride the
    NTFS permissions.
    If You have any other options so please suggest me or otherwise mark it as Answer 

    Sounds good. :)
    Arnav Sharma | http://arnavsharma.net/ Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading
    the thread.

  • Printer Share permissions

    I'm trying to modify the share permissions for a printer share in server 2008r2.  On the share tab we have  a check box for share printer.  No permissions tab.  I would like to remove the everyone permission from the share permissions. 
    Folder shares has a share permissions tab, why not printer shares.

    Hi,
    As Yagmoth555 mentioned, if you want to set permissions for a shared printer, you should click
    Properties, and then click the Security tab. For details, please refer to the following article.
    Set or remove permissions for a printer
    http://technet.microsoft.com/en-us/library/cc738233(v=ws.10).aspx
    Best Regards,
    Andy Qi
    TechNet Subscriber Support
    If you are
    TechNet Subscription user and have any feedback on our support quality, please send your feedback
    here.
    Andy Qi
    TechNet Community Support

  • How to set NTFS and share permissions for Users share for home directories in Server 2012

    I have a new Server 2012 server, and I want to set up a Users share, that will contain subfolders of each user's username and contain their home directory.  But what do I set the share and NTFS permissions as on the root level, lets call the folder
    Users? Is the following older article the correct permissions I need?
    https://support.microsoft.com/kb/274443

    Hi RJO22,
    You can choose configure the Folder Redirection, Folder Redirection enables you to redirect the location of specific folders within user profiles to a new location, such as
    a shared network location. Folder redirection is used in the process of administering user profiles and roaming user profiles. You can configure Folder Redirection using the Group Policy Management Console to redirect specific user profile folders, as well
    as edit Folder Redirection policy settings.
    The related KB:
    Folder Redirection Overview
    http://technet.microsoft.com/en-us/library/cc732275.aspx
    Specify the Location of Folders in a User Profile
    http://technet.microsoft.com/en-us/library/cc771969.aspx
    I’m glad to be of help to you!
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

  • Turned domain server into DC. Groups did not translate over. Share permissions changed. What did I do?

    I have two servers that are on a 2008 Active Directory Domain.  Server 1 was originally the main DC, while server 2 was just a domain member.  I upgraded the second server by adding DNS and Active Directory to the roles, and then used Server Manager
    to do the DC Promo thing. 
    For some reason, the shares on this second server now are seeing some of the groups that had were controlling access to the shares on this server showing  up as Account Unknown.  My users can't get into the shares anymore.  Errors suggest they
    no longer have permissions.
    What did I miss?  Those groups exist on the first server, and have the right users in them.
    Thanks

    Hi Christoffer,
    You are right that my last reply only applies to the first Domain Controller in the domain.
    I added a additional DC into the domain, its local users didn't show in ADUC, then I demoted it, and its local users were gone.
    Thank you for the reminding!
    Regards,
    Amy
    I agree with Christoffer. I'm happy to hear your lab results provided you the same information.
    If the original poster did see the local users and groups appear in ADUC after the promotion, it's telling me that it was promoted into a brand new domain/forest and not as a replica.
    The shares should show up, and I understand that if any of the local users and groups were in the ACL that they should now show up as Unknown User, but if the users and groups showed up in ADUC, then something went wrong.
    If the original poster, Emmette, can provide us a specific step by step on how the second DC was promoted, along with an ipconfig /all from each DC,
    that will better help us understand what occurred, and help us provide assistance to fix it.
    Ace Fekay
    MVP, MCT, MCSE 2012, MCITP EA & MCTS Windows 2008/R2, Exchange 2013, 2010 EA & 2007, MCSE & MCSA 2003/2000, MCSA Messaging 2003
    Microsoft Certified Trainer
    Microsoft MVP - Directory Services
    Complete List of Technical Blogs: http://www.delawarecountycomputerconsulting.com/technicalblogs.php
    This posting is provided AS-IS with no warranties or guarantees and confers no rights.

  • ActiveDirectory/DNS and Folder Share Permissions

    I have a remote office connected to Headquarters over a WAN.  The HQ provides DNS, ActiveDirectory, etc.  The remote office is not allowed to use Workgroups.  
    At the remote location I designate 1 machine to be a server and I have 2 clients that want to access the 1 designated server. All 3 boxes are at the remote office,
    I create a share on the server and give 2 local site users permissions to the share.  These users are domain\usernames.   Now the clients both have access to the share on the server and all is good.  
    The Problem: Sporadically, the remote location loses internet and thus loses access to the WAN services such as DNS/ActiveDirectory, etc.  At this point my clients cannot access the share.  Is there a solution to this situation?  Also, using
    local accounts/workgroup is against corp policy so Domain names are required for logins/permissions, etc.  When the WAN is down my shares are dead.
    Any ideas on how I can resolve this?

    Hi,
    As you said without WAN, authentication will be failed so domain accounts cannot be verified to access the share.
    The solution is to build-up a DC or a RODC - you can upgrade your file server to RODC so that it could help handle this kind of issue. 
    If you have any feedback on our support, please send to [email protected]

  • Library Share Permissions and Ohter Questions

    I am setting up Library Server and want to know little bit about it:
    1.  What are the permissions required on the share of library server? which service accounts, computer accounts or cluster objects to add? and what permissions?
    2.  Is there any limitation with respect to name of the share that it should not have any spaces in the name?
    3.  Is there any limitation as how many folders inside a folder would be listed in the console?  I have around four folders inside the main shared folder and only two are showing in the console.  Can it only contain packages or single file
    and not extracted ISO images?  The folders inside the main shared folder that is showing only shows bit of the actual content of the folder.
    Thanks in advance.

    Thanks for the replies.
    1.  But, when we create a folder and share it to be seen by the VMM Console, with what permission should be shared i.e. everyone read only or vmm admin account read only, etc.
    2.  So, it is better to use underscores on all folders at least just to be safe.  correct me if I am wrong.
    3.  Actually, I have made a folder of Setups which has folders like applications, operating systems and drivers, etc. folders with respective content in them.  When I am adding it as library share, it shows some of
    the content not all of it.  Should I just add .cr to the parent Setup folder or all the folders inside it?

Maybe you are looking for