User can't change security?

[Solo4357]

I gave a user full control on a set of directories on a share but he can't change permissions unless he's a domain admin. I'm guessing it's a policy (user-rights) issue but nothing is looking familiar. Any ideas?

 

[porkchopexpress]

Did you give them full control NTFS permissions or share permissions, if they are a member of a group that only has 'change' share permissions then they won't be able change NTFS permissions.

 

[ITPangaeaArchitect]

by default in windows 2003, for whatever reason, the share permissions are Everyone-Read only. Check the share perms as suggested, and change the perms to Everyone-Full Control. After that, all you need be concerned with is alteration of NTFS perms on the folder when necessary.

-Brandon Wilson
MCSE00/03, MCSA:Messaging00, MCSA03, A+
Manager - Global AD Operations
ACS, Inc.

 

[Solo4357]

That was it. Thanks! I usually go through and set share permissions to everyone full control and just set NTFS permissions. I didn't figure it was it but sure enough, forget to check the obvious and it bites you in the butt...