Ourfiles SHARE permissions

Step-by-Step

Share permissions to be set before proceeding to create additional folders within the share:

1. Under the security tab within the Properties for the share, be sure the two Read/Write “SHARE” entries are there as well as the “Domain Admins” and “OF_OurFiles_Admins” groups.
2. Click the Advanced button and then the Change permissions button.
3. Be sure the OF_OurFiles_Admins and Domain Admins groups have Full Control; applied to “This folder, sub folders, and files”.
4. Be sure both the SHARE_Read and SHARE_Write entries (you have to change one at a time) are set to apply to This folder only and that the permissions are set to only allow “Transverse folder / execute file” and “List folder / read data”. All other check-boxes should be unchecked. Click OK. This will leave the permission as “Special” for both of those entries.
5. Click the check-box labeled Replace all child object permissions with inheritable permissions from this object.
6. Click OK.
7. Click OK.

Details

Also use these same permissions to apply to top level folders within a Share when the folders within the top level folders are to have permissions restricted by AD security group (instead of inheriting from the top level folder.