Hello,
I have a folder 'Shares' shared to the entire organisation. Within this folder there is subfolders e.g 'Finance' 'Marketing' etc.
I have locked it down so only certain security groups can access their respective subfolder e.g Finance.
Problem is users e.g sales people who do not have access to the finance folder (they get a access denied message) can right click on the Finance and go to Security and add themselves as a user, even though they cant access the file.
Permissions are as follows:
'Shares'
Sharing permissions - Everyone Change / Read
NTFS Permissions - Domain Admins Full Control, Authenticated Users Traverse / List Folder applies to this folder only.
'Finance'
No inherited permissions, Domain Admin Full Control.
So why can users edit permissions of the finance folder?
