I have a fileserver, 'MrFileServer', with drive X shared as 'stuff' (\\MrFileServer\stuff):
- The share permissions on 'stuff' are 'Full Control' to 'Domain Users', 'Domain Admins', and 'MrDomainController\Administrators'
- The security permissions on the root of the X drive are 'Full Control' to 'Domain Admins' and 'MrDomainController\Administrators', and 'Read & Execute' to 'Domain Users'
There is a folder on X labled 'Virtual Machines':
- Permissions are set to not inherit from its parent
- A group named 'Virtual Machine User' owns the folder and all of its contents
- 'Full Control' is given to 'Virtual Machine User', 'Domain Admins', and 'MrDomainController\Administrators'
There is a folder on X labled 'Projects':
- Permissions are set to not inherit from its parent
- A group named 'Developer' owns the folder and all of its contents
- 'Full Control' is given to 'Developer', 'Domain Admins', and 'MrDomainController\Administrators'
User 'MindChild' primary group is 'Domain Users'. This user also belongs to the 'Virtual Machine User' and 'Developer' groups:
- 'MindChild' CAN access the contents of \\MrFileServer\stuff\Virtual Machines\
- 'MindChild' CAN NOT access the contents of \\MrFileServer\stuff\Projects\ (Access Denied)