Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Mac OS X Snow Leopard
Windows Server 2003

Windows Folder "Videos"
Share Permissions on Videos
- Everyone
NTFS Permissions on Videos
- System (Full Control)
- Domain Users (Modify)
- Domain Admins (Full Control)

Mac user Michael is a part of the Domain Users group. He connects to Videos using cifs://server/Videos and authenticates with his username Michael. Michael copies over a file "dance dance baby.avi".

User Jon opens the Videos folder but cannot see the dance dance baby.avi file.

Checking the dance dance baby.avi file permissions here is what I see:

Everyone - Read, Write
Domain Admins - Full Control
Michael - Read, Write
Owner of File - Michael

So here's my question, how come when Michael copies a file over from a Mac, the permissions on the file get changed even though Michael has no rights to change permissions?

If the same file is copied over from a Windows machine, it just inherits the proper permissions from the parent Video folder.

Am I missing something? Are my permissions wrong? Thanks.

Michael

share|improve this question
    
Whenever a file is created, the process creating it can set whatever permissions it likes. Also, the owner of a file - the account that created it - can always change the permissions. You can mitigate the second issue by setting "modify" instead of "full" permission on the share. –  Harry Johnston Mar 16 '12 at 4:26
    
Actually, if you remove the CREATOR OWNER permissions they won't be able to take ownership of the file. Yes I have the perms set as modify instead of full. The problem has been solved, it's because I was using cifs not smb. –  Michael Mar 16 '12 at 15:51
    
just to confirm, the share permissions are set as "Everyone: Modify"? The question doesn't say. –  Harry Johnston Mar 17 '12 at 23:23
1  
CREATOR OWNER permissions don't have anything to do with being able to take ownership. When a file is created, the person who created it is the owner and (unless blocked by share permissions) will be able to change the permissions on it. –  Harry Johnston Mar 17 '12 at 23:26
    
However, if I understand your problem rightly, none of this matters; you don't actually want to stop users from deliberately changing permissions, you just want the default permissions set the way you want them. –  Harry Johnston Mar 17 '12 at 23:27

1 Answer 1

up vote 0 down vote accepted

Looks like using smb:// instead of cifs:// to connect fixed the issue.

http://msdn.microsoft.com/en-us/library/windows/desktop/aa365233%28v=vs.85%29.aspx

Although its main purpose is file sharing, additional Microsoft SMB Protocol functionality includes the following: - File, directory, and share access authentication

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.