Forum Discussion

Ult1me's avatar
Ult1me
Copper Contributor
Aug 06, 2019

[WAC 1904] Share permissions added directly via PowerShell works, but do not appear in WAC

Dear all,   Yesterday I discover an issue with share permissions in WAC. When I create a new network share via PowerShell directly on the server and attach some permissions to users or groups, thos...
HidMov's avatar
HidMov
Steel Contributor
Aug 06, 2019

Hey Ult1me 

 

From what I can tell after some quick testing, it looks like the ACL showing in WAC is not the SMBShare permissions of the folder but rather the NTFS permissions. However, the options in WAC is simplified (deny, read, read/write) and it doesn't appear that an entry will show unless the NTFS permissions match exactly up with the deny, read, read/write entry). 

 

For example, I added a group with List Folder Contents, Read, and Write NTFS permissions and could see the group in WAC as having Read permissions. If I add 'list folder contents' to the NTFS permissions on the server then the entry doesn't show in WAC. Add on 'full control' in NTFS again, then the entry makes an appears in WAC with Read/Write

 

Hope this makes some sense!

 

Cheers,

Mark

Ult1me's avatar
Ult1me
Copper Contributor
Aug 07, 2019

Hi HidMov  

 

I was thinking about the same, especially after looking at sample scripts provided by WAC team, which are using mostly NTFS permissions. It was a little bit harder to test it on Server Core on my own, but your tests confirm my thoughts. Thank you!

 

Cheers,

Mateusz

 

Resources