Macintosh Clients Lose Write Access to Directory with Advanced Permissions (247436)


The information in this article applies to:

  • Microsoft Windows 2000 Server
This article was previously published under Q247436

SYMPTOMS

When you set advanced permissions to a shared directory on a server running Microsoft Windows 2000 Server, Macintosh clients lose write access to the directory.

CAUSE

This behavior occurs because the advanced permissions on a directory in Windows 2000 do not have a one-to-one correspondence with the Services for Macintosh (SFM) shared directories, and SFM cannot implement security permissions as detailed as those implemented on a Windows 2000 directory. By design, when advanced write permissions are not granted, SFM restricts all writing to the directory.

STATUS

This behavior is by design.

MORE INFORMATION

Steps to Reproduce Problem

On a Windows 2000 Server-based computer:

  1. Create two Macintosh accessible volumes, setting Everyone - Change Permissions on one and Everyone - Special Permissions on the other, leaving Write Attributes and Write Extended Attributes unselected.
  2. From a Macintosh client running Macintosh OS 8.1, mount both shares.
  3. Attempt to copy any file from the Macintosh client to both shares.
  4. When you attempt to copy a file to the share with Special access, you receive the following error message:
    You cannot copy FILENAME onto the shared disk SHARENAME because you do not have the privilege to make changes.
Modification Type:MajorLast Reviewed:10/9/2002
Keywords:kbprb KB247436
©2002 Microsoft Corporation. All rights reserved.