Sharing a folder with specific users/group

I am trying to make 3 different shared folders for 3 different groups on Windows server 2008 R2. I have tried creating 3 folders in C:\, and then share it with the specific groups. The problem I have is that even though I have only given read and write permissions
to the specific group members, the other group members(from the 2 other groups) can still read and write in that folder. Which is not supposed to happen. What am I doing wrong and how can I fix this?
PS: I am quite new to this...

Hi,
As all accessing occurs locally, actually Share permission is not involved.
I assume the purpose is to create a folder which can only be accessed by several members in all 7 users.
Please noticed that, if all users are local admin (in local Administrators group), this will not work as local admin can always take ownership of a folder for gain accessing rights.
If you (and other members in that group) are the only local admins on this computer, set NTFS permission will work. 
Again if one of the excluded members has local admin permission, he/she can take ownership to gain accessing rights. 2 workarounds are "set password with a third party application" and "create a new volumn for saving those files, and enable
BitLocker encryption on that volume with a password". 
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Similar Messages

  • Sharing a folder with other users on the same machine (SOLVED)

    Hi,
    Recently, I've been sharing my computer with my dad. I don't want him to use my account, since I have a lot of secret files and bookmarks on my profile. However, I would like to share all my music with him. What I did was to set the permission of my Music directory to 777 and using root create a symbolic link from my own account to his account. But then when I log into his account, it says the folder is corrupt.
    Then I created a symbolic link from my music directory to /media/ and set the permission to 777. Again I tried to see if I can access it from my dad's account and got the same error.
    What's the best way of creating common folders between users in a linux machine?
    Note that, since I use Amarok, I don't want to move my Music to somewhere else, because it will mess up with the database info of songs.
    EDIT: I solved the problem by using mount instead of symbolic links.
    You have to issue the following command:
    mount --bind /home/name/music /media/music/
    Of course you have to execute this command whenever you boot the computer. Just place this command in rc.local and you're good.
    Thanks
    Last edited by mohtasham1983 (2009-11-05 22:06:03)

    grey wrote:If I wanted to share it between different users, I wouldn't put it inside one particular users home directory. Just use a reasonable place that is not used by the system, like /usr/local/data, /var/shared or so, give it the desired permissions and that's it.
    you are absolutely right and i recommend this as well.
    grey wrote:The link will probably not work, because in order to read /home/yourname/music, you need to be able to read /home/yourname. That is even true if root created the link.
    that is true for symbolic links, not bind mounts.  a bind mounted dir doesn't care about the parent directories because your not traversing to it through a link, it's just 'there'.  this is how i put folders under my ~ out on my http server.

  • Unable to share a folder with specific users

    Hi,
    I'm attempting a seemingly simple task on my home network of 4 computers. I want to share a folder located on one computer, called PC1, with another computer called PC2 with full read/write permission. All other machines on the network are not to have access
    to this folder. Both machines are running Windows 7.
    On PC2, I am able to see the shared folder under Networks but if I try to open it, I keep getting a 'You do not have permission to access...' error. The following are the steps I've taken to set up the network share.
    Both machines are on the same workgroup.
    Both machines are on the home network, not work/public.
    Turned off homegroup on both machines in Advanced Networking Properties by selecting "Use user accounts and passwords to connect to other computers".
    Created a standard non-admin user account on PC1 that has the same username/password as the admin login used to log into PC2.
    On PC1, right-clicked the folder I want to share and added the above user account to both the Sharing and Security tabs.
    Removed the Everyone group in PC1 from both the Sharing and Security tab for the shared folder.
    If I am missing a step, please let me know. I have noticed that if I add  the Everyone group back to the Sharing and Security tab for the shared folder on PC1, I am able to have full access from PC2. However, since I want to restrict access
    to this folder to only one machine, I didn't want to have the Everyone group listed.

    As this thread has been quiet for a while, we assume that the issue has been resolved. At this time, we will mark it as ‘Answered’ as the previous steps should be helpful for many similar scenarios.
     If the issue still persists and you want to return to this question, please reply this post directly so we will be notified to follow it up. You can also choose to unmark the answer as you wish.
     In addition, we’d love to hear your feedback about the solution. By sharing your experience you can help other community members facing similar problems.
     Thanks!
    Arnav Sharma | http://arnavsharma.net/ Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading
    the thread.

  • Google drive does not work with specific group but works with all users group!!

    Hi,
    Why Google drive does not work with specific group but works with all users group?
    My rule :  Internal > external > all users = works fine
    But
                   Internal > external > A group = not working !!

    Hi,
    if you require user authentication in Firewall policy rules, the clients must bei Webproxy clients (for HTTP / HTTPS) or TMG clients (for TCP/UDP):
    http://technet.microsoft.com/en-us/library/bb794762.aspx
    regards Marc Grote aka Jens Baier - www.it-training-grote.de - www.forefront-tmg.de - www.galileocomputing.de/3276?GPP=MarcGrote

  • My question is in regard to pc to mac migration. How do I migrate information from my pc with specific user account to an existing user account on my mac? I do not want to use multiple mac user accounts.

    My question is in regard to pc to mac migration. How do I migrate information from my pc with specific user account to an existing user account on my mac? I do not want to use multiple mac user accounts.

    https://discussions.apple.com/message/16371308#16371308

  • Batch Risk Analysis in Full Sync mode with special user groups not working

    Dear All,
    we start Batch Risk Analyse Job in Full Sync with special User groups (use Range). In the Joblog I can see, that he selecet lesser users as in jobs before. But after all is finished (also managment job) when I go in Informer, he shows me also this user groups I have no analysed in Backgroudjob... Also he shows me in the detailed anlayse the date from a run before.. And we have deactivated some Risk - these are still in the analysis.
    Have some one a information for me what here is wrong..
    Best Regards
    Gabriele Herr

    to old..

  • WGM creates new home folders with _unknown user/group, SA can't change it

    A little background:
    In our school we've got an xserve (about 1.5 yrs old), that was having issues last year. (the OD database pretty much ate itself). in august we did a clean install of 10.5, and updated to 10.5.3 (after suffering through the AFP/OD issues in 10.5.2). Because of the corrupt database from the last server, and the fact that a large number of our accounts have migrated through 4-5 iterations of servers from 9.2 on through 10.4.11, we created all new clean accounts by hand in WGM and moved the user files to the new home folders, changed user and permissions with SA to the new accounts and propogated that info to all the files for each home folder. everything has been going fine since then.
    until this week.
    the issue was discovered when we tried to create a new staff account (we created several accounts last week with no issue). in WGM everything looked fine. it created the account, assigned it to the proper group, and sucessfully created a home folder. the problem however was when we went into SA to change the permissions. we don't need everybody seeing everyone else's files, so we change the default group and everyone permissions to something more appropriate (don't even get me started on that gripe). When you navigate to the new home folder you just created in WGM, it shows the owner as _unknown (read/write) and group _unknown (read only... I think), Everyone (read only). Server Admin refuses to change the user or group. doesn't matter whether you use the 'show users/group' dialog and drag the account, or whether you edit it manually and insert the short name or UID. when you hit save, it stubbornly reverts back to unknown/unknown for user and group. we've tried creating accounts with different templates, no template, different account names and UID's, all with the same result.
    The odd part is that nothing in the OS has changed since we first set it up and created all the users. nothing installed, nothing updated...
    We've stayed at 10.5.3 due to the disaster in one of the updates (10.5.5 I think) that many of our other local districts had with network accounts not being able to see their own library folders due to permission issues, as well as the AFP causing 100% CPU use bug reported with 10.5.5
    A second, probably related issue is that when browsing home folders in Server Admin filesharing, any files our network users create seem to end up assignedunknown/unknown for user and group (as far back as October it seems). After searching around the net most of the day I came across a lot of info about the _unknown user issues for folks upgrading from 10.4, but these are all newly created 10.5 network users (not local) logging in and working in home folders on the server. The original owners can read/write/delete these files as normal.
    Any help would be most appreciated.

    ok... I find we were shot in the foot by one of our own.
    The quick answer: DO A GET INFO ON THE VOLUME WITH THE SHAREPOINTS! if the 'ignore permissions on this volume' box is checked... UNCHECK IT!
    Explaination: not sure how the ignore permissions box got checked, but I don't think it was done directly by human hands. we use Carbon Copy Cloner Ver. 3.something (not sure which at this point) to back up both our data (daily) and server (weekly) drives to remote storage. by striking coincidence, things started saving with _unknown user and group about the same time as crash reporter shows that CCC hosed itself. My guess is that CCC temporarily ignores permissions (as shown in the status when you do a clone) and then resets them to their original state. when it crashed, it looks like they were still set to ignore, so it happily set it back to that state every time it ran after that. not sure why the account creation issue suddenly turned up after so long... In any event, it turns out that if you have sharepoints on a server volume, AND you set the OS to ignore permissions on that volume, BAD things happen (I'm not sure it should even be an option on a shared volume, but that's for the engineering folks to figure out.) .... specifically, the symptoms above. if you login as root (yeah, I know that's something you should never do) and uncheck the ignore permissions box on the volume, then log into WGM, as root (yeah, yeah, I know... even worse) and set ALL of the Directory Administrator accounts to 'do not administer this server', and no change rights for the directory, save those settings, and then set them back to 'administer this server', and FULL rights to change the open directory, save again. and then WAIT until the drives stop going nuts... after that everything works fine.

  • Sharing Itunes library with another User Account & Fast Switching

    Hi. I recently purchased a new iMac G5 and am in the process of setting it up to be used by 2 separate users (girlfriend and me). I apologize in advance if this is more of an Itunes issue and not solely an Administration issue.
    My question deals with creating a new user account on my Mac (with Fast Switching) and allowing my girlfriend to share my iTunes library with the ability to transfer music to her ipod when she is logged into her own unique account. I will be the Administrator on the Mac.
    We are trying to avoid loading our music two times into the Mac under each of our logins. Is there a way that we can share the music I have already loaded into my Itunes library when she is logged into her account so that she can transfer to her ipod and create her own distinct playlists? If so, any advice on how to enable this would be greatly appreciated.
    Thanks.
    Seth
    iMac G5   Mac OS X (10.4.3)  

    Unfortunately, baltwo's solution will not allow your girlfriend to create any playlists or copy songs to iPod.
    The easiest thing would be to share the entire music folder, so anyone of you can listen to your music.
    You'd have two options.
    If you want to be using the exact same library, so any playlist you created can be edited by your girlfriend and vice versa:
    1. Go to yourusername/Music/iTunes. You'll find two files called "iTunes library" and "iTunes music library" Copy them to your desktop, so you'll have a backup just in case.
    2. Move your yourusername/Music folder to computer/users/shared. (The folder will be copied ONLY in case your using FileVault, so you'd have to delete the original User/Music folder after making sure you'd got a functional copy at computer/users/shared) Select users/shared, press "apple+i" to get the info window, go to "Ownership" change all permissions to "read & write" and hit "apply to enclosed items"
    3. In case you're using FileVault, either delete or rename the original Music folder within your own account. Again, not necessary as long as FileVault isn't enabled.
    4. Select computer/users/shared/music, hold down "ctrl" while clicking on it and choose "create alias" from the contextual menu. Copy that alias into your homefolder as well as your girlfriend's account (need to log in) and rename it to "music" without the "alias" at the end.
    5. Launch iTunes. Done.
    6. Don't worry, in case you don't see your music. I've used a slightly different approach, yet this one should work totally fine.
    If you want to listen to the same music, yet be able to set up your own playlists, ratings etc.:
    For your account:
    - go to yourusername/Music/iTunes, move "iTunes Music" to computer/users/shared and change ownership according to #2.
    - If FileVault is enabled, check #3. Of course, you want to rename the original "iTunes Music" in this case.
    - create an alias for computer/users/shared/iTunes Music and copy the alias to yourusername/Music/iTunes. Rename it to "iTunes Music" without "alias".
    - Launch iTunes. Should be working the way it used to. Quit.
    For your girlfriend's account:
    - log in, copy alias to username/Music/iTunes, rename alias.
    - Launch iTunes, go to File-> Add to Library, select username/Music/iTunes/iTunes Music, choose.
    That's it.
    The only downside is, only one user at a time can access the music folder, so if you're logged in and running iTunes, you're girlfriend, logged in via fast user switching, won't be able to open iTunes until you quit it for yourself. Haven't found a way around this yet.
    Fell free to report any issues.
    huhh...rather long posting...

  • Question re. sharing iTunes library with other user accounts

    I have seen this document:
    http://support.apple.com/kb/HT1203
    I want to share one library with four users on my account.  I'd like for any music purchased or ripped to this computer to end up in User 1's iTunes library, and for Users 2, 3 and 4 to have access to User 1s library just as User 1 does.
    When I follow the directions for "Listening to another account's music files" in the above referenced document, it tells me to navigate to User 1's library through the dialog box that pops up after User 2 clicks "Add to LIbrary". 
    The problem is, when User 2 is doing that, and User 1 has put the iTunes library in ~user1/public, as the directions suggest, that dialog box won't allow user 2 to access User 1's Public folder.
    Thoughts?
    Thanks in advance...
    Chris

    Another long description in store here...
    iTunes has two main elements. One is the library.itl database file.  When you open iTunes it is this that you see. It contains what music is in a library, playlists, date added, playcount, etc.  It is this that is really the library.  The other element are the media files. When you tell iTunes to play a track it checks in its library file which music file is associated with that track and goes and plays it.
    Now you say, "for Users 2, 3 and 4 to have access to User 1s library just as User 1 does."  Do you really want User 4 to be able to go and delete or rename tracks, or change the playlists? This can be done if you really want it.  Or do you want each person to keep their own library [file] and share media?  Even that has disadvantages as a person might still be able to rename a file or even delete it for all.  At least everybody would have their own playlists, ratings, etc, though a person could delete a file and then it would appear as a broken link for others.  To be honest, iTunes isn't great for sharing.
    What are the iTunes library files? - http://support.apple.com/kb/HT1660
    More on iTunes library files and what they do - http://en.wikipedia.org/wiki/ITunes#Media_management
    What are all those iTunes files? - http://www.macworld.com/article/139974/2009/04/itunes_files.html
    Exactly what you want to do will involve different setups so before going into detailed insructions it would help to know which ones to provide.  Here's an sampling:
    iTunes: How to share music between different accounts on a single computer - http://support.apple.com/kb/HT1203 - relocating iTunes' media folder to a shared area but leaving separate library files - extra tip at https://discussions.apple.com/message/17331189
    Chris CA's instructions on sharing one iTunes music library between multiple user accounts - https://discussions.apple.com/message/8974074 - Multiple users using a single library file - similar post at: https://discussions.apple.com/thread/3753008
    iTunes Home Sharing now works between users on same computer - https://discussions.apple.com/thread/3865597  The problem with HS is I think you then end up with multiple copies of files, one for each user.  At least they cannot damage another's collection though.

  • Sharing one library with two user accounts.

    I want to share one iTunes library with two user accounts on the same iMac.
    I've followed the tutorial where you move the iTunes Music folder to a shared location HD/Shared/iTunes and then pointed both iTunes to that location via the advanced menu, but only the admin account has the music. The other user account iTunes shows nothing.
    Also, I've now moved the music folder back to my area on the HD (not shared any more) and now the iTunes music folder shows all the album folders where before I guess they were hidden. Why and how do I get it back to how it was...?
    All we're trying to do is share one mac. My wife and I have our own log in user accounts, but want to have the same music and iPhotos accessible on our own set-ups.
    Thanks for any help.

    Out of interest I got this to work.
    I made a folder called 'All Music' and put all the album folders in it.
    Moved this folder to User/Shared/ and then clicked on the file, and Get Info.
    In Get Info added my wife to Sharing & Permissions as Read & Write.
    In iTunes / Advanced found the folder on my user account, and then did the same on my wife's account and hit add to library.
    I hope this was the right way to do it..... It seems to have worked.

  • Sharing itunes library with additonal user on same PC

    My husband and I both have separate itunes accounts on the same PC and log on to Windows 7 as different users (I am the administrator).
    How can we share our itunes libraries with each other? Home sharing only seems to work for more than 2 PCs!
    Also, how do we switch between users and both be able to open itunes at the same time without one user having to log off?

    I am afraid two users cannot have iTunes open at the same time.
    As you say home sharing is designed to work between PCs on the same network, it does not work across accounts on one PC.
    The way I share music is to have a single iTunes Music folder in the shared music folder.
    Then you have the option of having a single library database in shared music which both accounts access or separate library databases in you own accounts accessing the same pool of music files but keeping counts, ratings and playlists separate.

  • Sharing Itunes Library with multiple users on same computer

    Several people in my house share the same laptop and we all have our own user id. I am the administrator. How do I set up itunes so that all of the music, the entire library, is accessible to all user id's when each person is logged in? I thought I had it figured out but whenever I download new music the others don't see it, only what was already there. Any help would be appreciated. Thanks.

    Give this ago, This is what I am trying at the moment and is a bit experimental, I haven't Tested it yet with iPhone/iPad/iPods sync yet. (will do this soon and will report back)
    1. BACK UP!!! (just in case) Copy your itunes folder normally found under (user - "username" - Music folder) to a usb drive or just copy it into the music folder. (in fact do a full system back up I'm guessing you haven't done it in a while)
    2. Create the new user account if not already done so. (I am setting up my other users as a new users with no existing iTunes content.)
    3. Move the itunes folder under (user - "username" - Music folder) into (user - shared)
    4. Change the read/write access to the (user - shared - iTunes folder) Right click on the folder - +Get Info+ - Under Permissions allow all the users Read & Write, Click the cog and select apply to enclosed items.
    5. Make an alias of the "iTunes folder" and move it back to your original itunes folder location +(user - "username" - Music folder)+
    6. Remove alias from the name.
    7. Start itunes check to make sure every thing is ok, play a few tracks.
    Under iTunes preferences - Advance
    make sure the itunes media folder location is (user - "shared" - iTunes - iTunes Media)
    I also have Keep iTune media folder organized checked
    & Copy files to iTunes Media folder checked. (When music, vids, or update Apps for my iPhone/iPod, it should now show up in the other user's account)
    8. Close out of itunes User done.
    9. Log into user 2's and go to (user - shared) folder Check to make sure this user has read & write permissions. Make an alias of the "iTunes folder" and move it to user 2's music folder +(user - "username" - Music folder)+
    10. Start itunes check to make sure every thing is ok, play a few tracks.
    Under iTunes preferences - Advance
    make sure the itunes media folder location is (user - "shared" - iTunes - iTunes Media)
    Make sure Keep iTune media folder organized & Copy files to iTunes Media folder are checked.
    Log this user into the iTunes store if need (it shouldn't effect the the other users)
    11. YOUR DONE, Unless you have more users, then just repeat steps 8, 9 ,10 (and 11 if needed)
    Just note that only 1 user can access the Shared iTunes account at a time so close iTunes if you not using it.
    Each user should be running off the same iTunes library now. Once you are happy with the set up and nothing has happened to your music then delete the back ups in step 1.
    Hope this helps, Let me know how you get on?
    I will let you know how I get on with 2 iPhones and 2 iTunes store accounts under each User syncing.
    AND I cant see why this shouldn't work for iPhoto.
    Message was edited by: Gmor

  • Sharing album artwork with fast user switching and soft links

    We have 4 users, 4 iPods, 4 sets of playlists. Each has their own account. All the music lives on an external drive and each iTunes is set to store its music in the same shared folder. That all works fine.
    Now we're getting into album artwork, and I want to share that too. I found a posting somewhere that suggested a soft link from /Users/Me/Music/iTunes/Album Artwork -> /Volumes/BigDrive/iTunes Artwork. I did that with one user and it worked fine - copied Album Artwork folder and set soft link and voila, all the art. I also set all permissions to allow r/w from everyone.
    But when I set the soft link from 2nd user, iTunes shows no art. I can browse all the art files fine from that users Finder.
    Thanks for any help!
    mac mini   Mac OS X (10.4.9)   iTunes 7.1.1

    And just like that I may have found the solution! IT suddenly occured to me that one of the settings that got changed when we imported my wife's profile was a change to the sleep settings. Previously, I had had my iMac set to never go to sleep, since it shares our media with the rest of the house and runs eyeTV to record TV shows and such. For a little while after my wife's account was imported the settings to changes so that the computer would go to sleep after 15 minutes. I'm not totally sure why, but I think having that set up somehow meant that when we switched accounts my other account just "went to sleep" and therefore stopped sharing the iTunes library. After I noticed the change and switched the computer back to "never" for sleep the problem seems to have stopped.
    So perhaps check your sleep settings? That seems to be the only change I can think of that got things working correclty for me. I'll keep digging though and see if I can find any more helpful info. Good luck!

  • Sharing Itunes Library with several users on the same computer

    Hi,
    I'm trying to share the iTunes library on a SP2 system. I placed the Itunes folder on a partition and setted iTunes to use this folder in each user account but...
    When one add musics to the library, thoses musics are not visible once switched to another user account.
    How to really share the same library with several user accounts one the same machine ?
    Thanks

    Note that Otto42's post is from March 2006. This is way before iTunes 7, which allows you to move the iTunes folder.
    His steps will work but are much too involved and unneeded.
    Rather than using TweakUI (and possibly messing up something), just move the entire iTunes folder to a shared directory and hold Shift when starting iTunes, then select Choose library and go to the iTunes folder.
    All changes made by any user will be to all users.
    Note that only one user at a time will be able to access iTunes.

  • Sharing iTunes Library with two users on the same computer

    I have all of my music stored on a external hard drive.
    Both users on the same computer have the iTunes music location folder as the external hard drive. How do I see music added in one persons log-in? For example: I just purchased two albums under one log-in. The second log in can not see that music unless I manually add it.
    Both Libraries point to the same file location.
    I have over 40GB of music and I am looking for a way to manage my music files more effectively and I want to make sure that both log-ins have the same music.
    I followed the instructions in article HT1203 from the apple support site.

    lafdengine9 wrote:
    Both users on the same computer have the iTunes music location folder as the external hard drive. How do I see music added in one persons log-in? For example: I just purchased two albums under one log-in. The second log in can not see that music unless I manually add it.
    The reason you are having this issue is because you have a shared library but private databases. What you have on the external drive is the collection of media files (library) that each account is set up to access as the source for media. What you have not done is set up a shared iTunes database, so each user accesses the same library differently.
    When each user opens iTunes, iTunes access the database on their account (~/Music/iTunes/iTunes Library). Therefore, their settings, views, playlists, etc., are private. When they add songs to their library only their database file is updated to reflect those additions; simply having files in the music folder does not mean that iTunes will recognize them, hence the reason iTunes asked you if you want to move the file to the trash when you delete it from your library.
    The confusion here is the double use of the term library. The contents of you music folder most definitely constitutes your media library, as it is the collection of your media files. What you see as your library in iTunes is not your library but, for the most part, the content stored in a database table maintained by iTunes in the iTunes Library file in your iTunes folder. iTunes does not access your actual media files unless it is absolutely necessary. The general assumption is that what is shown in your iTunes “library” will actually mirror what is in your music folder.
    So the missing step in your setup would be to switch to the account that has the most current iTunes library—that is the one reflects the actual contents of your music folder as of now—and follow this procedure.
    1. Quit iTunes.
    2. Move the iTunes folder to the Shared folder (./Users/Shared).
    3. Launch iTunes, but immediately hold the option key to invoke the Choose Library window.
    4. Select the database (iTunes Library file) now located in the shared folder.
    5. If you do not see your content, go to iTunes’ preferences and reset the location of the music folder to the external drive.
    6. In the other accounts, re-launch iTunes and change the library according to steps 3 and 4.
    Now all users will have access to the same iTunes database as well as the shared library. The downside of this is that each user will have full access privileges. If you have iTunes 8, then to avoid the disadvantages that come with this type of set up, see [this thread|http://forums.macworld.com/thread/105366?tstart=0] over at Macworld.

Maybe you are looking for