I'm trying to access a share using user
Administrator while the ACL contains
Administrators (the group).
The permissions on the share are
Administrator: Full Control. (This is Windows 2016)
The security settings for objects inside the share inherit the ACL which contains the group
Administrators with full control, as well as the group
Users with Read & Execute permissions only.
I am having trouble writing/deleting these objects from a CIFS mount.
The share is mounted from Linux with no additional options, except for specifying the Administrator user to connect, resulting in:
Expected result: Since
Administrator belongs to group
Administrators, I should have full access using the CIFS mountpoint.
Actual result: I can only read but not write nor delete.
I looks like for some reason "Administrator" over CIFS is mapped to the
Users group, not
Administrators: Leaving only
Administrators in the ACL and removing
Users gives no access at all anymore. Explicitly specifying/adding
Administrator (the user) in the Windows ACL gives R/W access.