ReadyNAS 2120 OS6 - AD group "Domain users" automatically has full control granted on subfolders

Hi JennC, thank you very much for your replay.

Probably I didn't explained correctly the case.

Let’s try with an example: 

Imagine this tree structure:

MainFolder

      |_ SubFolder

I create the root folder (MainFolder) and configured:

From NetGear Admin page:

Network Access:

  SMB only, Allow Anonymous access = False

File Access (as default):

  Folder Owner=Administrator

  Folder group = Domain Admins

  Everyone = RO

  Folder Owner, Folder Group, Domain Admins = R/W

From Windows Client (as described on doc https://kb.netgear.com/7066/ReadyNAS-OS-6-Setting-Active-Directory-folder-permissions):

Removed Read premission to "Everyone" group.

At this point "Domain Users" have no access at all to the folder.

Now lets create the subfolder SubFolder.

I expected the inheritance was respected but the goup "Domain Users" is automatically addeed to SubFolder with full control on it.

So if I give, for example, read only access to MainFolder to a user or a group of users they automatically will have full access to SubFolder.

I think this is a bug on this version of OS because I didn't have this problem in previous versions.

Have a nice day.

Hi, 

When you create a new folder, that folder will inherit permissions from its parent folder. This is pretty standard, so if your share has full control (R/W) for Domain Users then your subfolder well as well. You want it be this way generally else you would have to set new perms on all new folders/files manually :)

If you don't want a given subfolder to inherit permissions, then just disable inheritance from the Windows side. 

https://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/acl_inherit_permissions.mspx?mfr=true

Cheers