Forum Discussion
Ult1me
Aug 06, 2019Copper Contributor
[WAC 1904] Share permissions added directly via PowerShell works, but do not appear in WAC
Dear all, Yesterday I discover an issue with share permissions in WAC. When I create a new network share via PowerShell directly on the server and attach some permissions to users or groups, thos...
HidMov
Aug 06, 2019Steel Contributor
Hey Ult1me
From what I can tell after some quick testing, it looks like the ACL showing in WAC is not the SMBShare permissions of the folder but rather the NTFS permissions. However, the options in WAC is simplified (deny, read, read/write) and it doesn't appear that an entry will show unless the NTFS permissions match exactly up with the deny, read, read/write entry).
For example, I added a group with List Folder Contents, Read, and Write NTFS permissions and could see the group in WAC as having Read permissions. If I add 'list folder contents' to the NTFS permissions on the server then the entry doesn't show in WAC. Add on 'full control' in NTFS again, then the entry makes an appears in WAC with Read/Write
Hope this makes some sense!
Cheers,
Mark
Ult1me
Aug 07, 2019Copper Contributor
Hi HidMov
I was thinking about the same, especially after looking at sample scripts provided by WAC team, which are using mostly NTFS permissions. It was a little bit harder to test it on Server Core on my own, but your tests confirm my thoughts. Thank you!
Cheers,
Mateusz