NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Domain Users Granted Read Access on Everything
Hello
Just an observation here which I'm not sure is normal or not. I have attached my Readynas Duo V2 to AD successfully and have created a new share. I have granted the user account I used to domain the NAS ownership rights via the Windows Explorer ACL and have also granted it full permissions at the root level. I have also removed the 'everyone' permission as I do not want all users to be able to even browse files with read only rights.
However, when I create new files or folders I notice 'domain users' is placed with read access which negates what I'm doing. I have tried removing the 'everyone' permission in frontview but this makes no difference to the windows ACL. I'm assuming this is the same as changing the share properties of a folder on a windows server, which I typically grant 'everyone = all access' and restrict using NTFS permissions instead.
If anyone can just give me some clarification on this (maybe it's a limitation of using a UNIX box) I would be grateful. It's not a major issue as I can repurpose the box but would just like to be sure.
Many Thanks
Pete
Just an observation here which I'm not sure is normal or not. I have attached my Readynas Duo V2 to AD successfully and have created a new share. I have granted the user account I used to domain the NAS ownership rights via the Windows Explorer ACL and have also granted it full permissions at the root level. I have also removed the 'everyone' permission as I do not want all users to be able to even browse files with read only rights.
However, when I create new files or folders I notice 'domain users' is placed with read access which negates what I'm doing. I have tried removing the 'everyone' permission in frontview but this makes no difference to the windows ACL. I'm assuming this is the same as changing the share properties of a folder on a windows server, which I typically grant 'everyone = all access' and restrict using NTFS permissions instead.
If anyone can just give me some clarification on this (maybe it's a limitation of using a UNIX box) I would be grateful. It's not a major issue as I can repurpose the box but would just like to be sure.
Many Thanks
Pete
No RepliesBe the first to reply
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
