I have a odd permission issue since I switched to Server 2016. Had no issue with the same share permissions under 2012 R2.

Share is always set to Everyone FC and I always manage the permissions with NTFS ones.

When I look under the effective access tab it says that my full control group is limited by share. But share is set to Everyone Full Control!

Any clue what is going on?

Effective Access

Share Access

Group Permissions


I prefer to verify permissions using 'net share' and 'icacls'. Make sure the share path and file path match, and that you see Everyone and FULL permissions:

PS C:\WINDOWS\system32> net share share
Share name        share
Path              c:\share
Permission        Everyone, FULL

PS C:\WINDOWS\system32> icacls c:\share
c:\share Everyone:(F)

Edited: Provided better example. As far as 'effective permissions' showing the 'share' limitation, try using an actual user account instead of a group.

  • You are right. The moment I verified a member of the same group in effective permissions it was fine. All green! :) Many Thanks! Any clue why I can't verify a group correctly? Is it by design? – ELCouz Oct 29 '17 at 1:59
  • 1
    I haven't gotten a straight answer for that, groups have always shown red. – spacenomyous Oct 29 '17 at 12:10

Groups are not a member of "Everyone" - only users are.

  • It wasn't clear first but eventually figured out. I was wrong assuming everyone means anyone who connect to the share, including groups since they are already part of the user list. Thanks for replying, even a year late can bring useful content! – ELCouz Jan 22 '19 at 22:20

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.