Concept: Share permissions apply to users who connect to a shared folder over a network. Sharing permissions do not affect users who log on locally or log on by using Remote Desktop.
To set permissions for a locally logged on user or a user who is using Remote Desktop logon, use the Security tab instead of the Share Permissions tab. This sets permissions at the NTFS file system level. If share permissions and file system permissions are set for shared folders at the same time, more restrictive permissions are used when connecting to shared folders.
Lab environment: Windows R2, VMware Workstation 11
Test environment: Workgroup or domain environment. For simplicity, there is no difference between the physical and the domain environment for the workgroup environment.
Reference: Https://technet.microsoft.com/zh-cn/library/cc726004.aspx
Command: Disconnect:net use */del
Create a new folder under Share on the server:
(1) Public
(2) Engineering Department
(3) Network Department
member : Engineering Department--user1
Network Department--user2
Public permission settings:
Create a new file within the public folder on the server-test1
Test:
Engineering Department and Network Department authority setting and testing:
Note: You need to close the shared folder that was opened by the user before using net use */del.
Additionally, to address the need to add permissions to a single user without the hassle, you can add groups directly:
Windows Server shared folder permissions settings