I'm trying to set permissions on particular folders within our domain (Windows 2003). NTFS permissions are set on the folder, to enable a certain group, call them Helpdesk, to change permissions.
Domain Admins have permission already. Access to the folder I've checked are the following:
On the server, via Explorer ie. e:\Folder\Shared-Folder
through network share ie.
through DFS ie.
Domain admins have access to everything, can change everything
if helpdesk log into server, and go via Explorer, they can make changes. if they connect via DFS, they can see the Security Tab, but all the "add" and "remove" buttons are greyed out. I think it's because they don't have "Delegate Authority" in DFS however if they go via the network share, they same thing happens.
I checked the Share permissions and this is where is gets a bit weird. The Share permissions are set to: Everyone - Read, Write
but if I log in as an admin account, I get full control, despite the share permissions.
can anyone help me with this odd problem? do DFS permissions trump share permissions?