[Samba] Samba4, file permissions not respected

Philip M. White pmw at qnan.org
Fri Sep 10 07:01:17 MDT 2010

On Fri, Sep 10, 2010 at 01:51:42PM +0200, Daniel Müller wrote:
> from your windows client login to your domain as administrator.
> choose the share go to properties security advanced give the group and
> users permissions.
> It should work.

Which permissions do you mean? Right now I have a file on my share that
has these permissions according to the Advanced Security Settings

Allow - Joe Smith - Full Control - <not inherited>
Allow - Domain Users - Read & execute - <not inherited>
Allow - Everyone - Read & execute - <not inherited>
Allow - SYSTEM - Full Control - <not inherited>

Joe Smith was the one who created this file.

However, I can log in as Jane Doe, who is a Domain User but AFAIK not in
the SYSTEM group, and modify that file.  As Jane Doe I am not able to
delete the file or change its permissions, however.  Why is Jane Doe
able to modify the file?


More information about the samba mailing list