Security permissions on file not working

User avatar
John Gray
PlatinumLounger
Posts: 5401
Joined: 24 Jan 2010, 08:33
Location: A cathedral city in England

Security permissions on file not working

Post by John Gray »

This relates to a number of Windows 7 Pro PCs in a workgroup, looking at a shared drive on a Windows 2008R2 file server. The same user accounts are defined on all PCs and on the file server.

The (NTFS) shared drive is mapped from each PC using Everyone: Full Control as the share permission.
Security permissions are set up on a particular spreadsheet as (effectively)
* Everyone - Full Control
* User1 - Read, Read & Execute: Allow //// Write: Deny

However, User1 has the ability to make changes to and save the spreadsheet!
This is not the desired behaviour...

I have tried a number of permission setups, without success.

My only theory is that although the same user names are defined on each PC and on the File Server, the SIDs of each account can differ between PCs and the File Server.

I don't think I can do what is wanted purely within Excel, but would be delighted to be told otherwise.
John Gray

Venison is quiet deer, and quite dear.

User avatar
StuartR
Administrator
Posts: 12577
Joined: 16 Jan 2010, 15:49
Location: London, Europe

Re: Security permissions on file not working

Post by StuartR »

I just tested this using two Windows 10 PCs. The permissions behave exactly the way I expect. The Deny permission takes precedence and I am unable to edit the file. This works correctly for both the local PC and the remote one.
StuartR


User avatar
John Gray
PlatinumLounger
Posts: 5401
Joined: 24 Jan 2010, 08:33
Location: A cathedral city in England

Re: Security permissions on file not working

Post by John Gray »

Thanks, Stuart, but I know that what I have set up ought to work!
But it doesn't... :sad:

Do you think my "different SIDs" theory holds water?
John Gray

Venison is quiet deer, and quite dear.

User avatar
StuartR
Administrator
Posts: 12577
Joined: 16 Jan 2010, 15:49
Location: London, Europe

Re: Security permissions on file not working

Post by StuartR »

No, John, I don't think so. The SID used to validate the file access is the SID of the local account on the server.
StuartR


User avatar
StuartR
Administrator
Posts: 12577
Joined: 16 Jan 2010, 15:49
Location: London, Europe

Re: Security permissions on file not working

Post by StuartR »

It would be good to verify that the remote PC is using the correct local account on the server. You can do this from Computer Management, Shared Folders, Sessions
StuartR