I'm trying to create folder with specific permissions on a server share, lets say the path is \\srv\foo\dir.
- foo is the parent folder that already has permissions.
- dir is the folder that I am setting permissions for.
I have three groups, which I've listed below.
- A - A group with full allowed access to the \\srv\foo.
- B - A group with full denied access to the \\srv\foo.
- C - The group I am trying to add permissions for.
I am trying to make Group C able to create, delete, move (etc) files and folders in dir, but have no access or allow permissions in foo.
Currently, foo has permissions to grant Group A full access, and to deny Group B all access. There isn't currently anything for Group C.
I have tried turning inheritance off, but even though I have allowed Group C full access in dir I'm still receiving an access denied message when trying to create a folder as a user in Group C.
I've heard that Windows Permissions value deny permissions before allow, but Group C doesn't have any "deny" permissions set in foo or dir.
Could somebody explain where I am going wrong, or if I have any misconceptions with how these permissions work and that what I am doing is (im)possible?