Windows 8 and 8.1 Forums


W8.1 File Sharing with Group Permissions and MsftAcct

  1. #1


    Posts : 16
    Windows 8.1

    W8.1 File Sharing with Group Permissions and MsftAcct


    I recently updated two of my computers to W8.1 and have been in awe of the headaches that come with it. One thing that seems to be a public nuisance is having to use a Microsoft Account to have a syncing onedrive folder. This aside I have been trying to get File/Printer Sharing working between a file server and a client.

    With my previous W7 setup I would create custom groups for access to certain file sets and it would all go off without a hitch, the same is true with W8.1 and local accounts. The issue comes in when I try to link a MS account to said local account, at this point it seems to ignore the group permissions. Below is a diagram of the setup and the expected/actual results.

    Code:
    = W8.1 File Server =
    - Added localuser test1
    - Added user to administrators group
    - Link test1 to MSAccount
    - Verified user is still part of administrators group
    - Give Administrators Read-Write permission and Security on the relevant share and files
    
    = W8.1 Client =
    - Added localuser test1
    - Added user to administrators group
    - Link test1 to MSAccount
    - Verified user is still part of administrators group
    With this setup, if I try to write a file to the share in question, I get an access denied, but if I instead explicitly give test1 Read-Write access to the share then the user can write files as expected. If I unlink the MSAccount from the localaccount then the share works as expected with out the user-explicit permissions. Finally, after I have tested the localaccount is working, if I link the accounts back to the Microsoft Account it once again stops working. It seems like MS screwed the pooch on this one and completely broke it's own group policy permission compatibility.

    Has anyone else seen this, or even better resolved an issue like it? Perhaps I am skipping a very simple step but I just do not see what it is.
    Last edited by eldonmcguinness; 26 Aug 2014 at 16:59.

      My System SpecsSystem Spec

  2. #2


    Central IL
    Posts : 3,468
    Linux Mint 17.2


    I have not had any issues with the changes. If it is just the One drive. Blame it on Microsoft changing how that works. That has nothing really to do with Windows 8.

    My son never uses his One Drive account. Only stuff that gets stored in there. Is the account settings for his laptop. Otherwise, everything goes into his google drive account.

    One Drive has nothing to do with the issues you are having. Something else is causing the problem when doing file/folder sharing on the network.
      My System SpecsSystem Spec

  3. #3


    Posts : 16
    Windows 8.1


    Well the OneDrive comment was a side bit really, I mean the only reason that I need to use the Microsoft account is due to it being NEEDED to use OneDrive on W8.1. The Real issue is Microsoft Accounts do not seem to obey Group permissions when setting up file/printer sharing.
      My System SpecsSystem Spec

  4. #4


    Central IL
    Posts : 3,468
    Linux Mint 17.2


    You need to forget about the whole Onedrive thing. As for the GPO. It helps to know if you area using the computer on a domain, or just as a stand alone workstation. You really do not have to do anything with GPO, for a stand alone workstation to do file & printer sharing.
      My System SpecsSystem Spec

  5. #5


    Posts : 16
    Windows 8.1


    No AD is involved in this setup. Yea I have kinda resigned to the fact that MS is infatuated with the whole forced MS account bit. I don't think this is GPO but more so the ability to have users in "groups" and give those groups permissions to shares and files.

    Perhaps another example will make it a bit clearer:
    Code:
    - Certain users are part of a group we will call "fish"
    - Users in the "fish" group should have the ability to Read-Write to the share "fish bowl"
    - All other users "Everybody" should have view only access
    - Users and groups are the same on both pc's
    This setup works and the fish are indeed able to Read and Write to the fish bowl.

    Code:
    - Link user that is in the "fish" group to a MS Account
    - Said user is no longer able to Write to the fish bowl share
    - Unlink said user and it is then able to Write to the fish bowl
    - Link user that is in the "fish" group to a MS Account (Again)
    - Give said user explicit permissions to the fish bowl and they can then Read-Write to the fish bowl
    - Again linking is done on both machines to ensure the user entries match and the experience is unified
    It seems that linking a user to a MS Account effectively breaks the group permissions to the share. Additionally, I tried to explicitly add the localaccount credentials to the users and still no dice.
      My System SpecsSystem Spec

  6. #6


    Central IL
    Posts : 3,468
    Linux Mint 17.2


    You are overthinking this. As for the extra you posted. It really has nothing to do with the question. The Microsoft live account, does not break Workgroup Network shares that are done through SMB/Netbios.

    You are getting into stuff, that is only done when connecting or working on a Domain, or using a Samba server as Domain Controller. Most likely while playing around with GPO. You ended up actually breaking the OS.
      My System SpecsSystem Spec

  7. #7


    Posts : 16
    Windows 8.1


    Hi broe23, thanks for the reply, I can assure you that I have not touched the GPO on either of these computers, as you said it would not do any good unless this was a Domain. The only thing that has been done is to create a couple of user groups, which I can then lump users into in order to make sharing a bit more manageable.

    I have completely wiped the computers earlier this week to ensure that it was not something I fubar'd. Ultimately the solution works just fine IF I do not link the MS Account to the LocalAccounts. Once I link the MS Account, the group permissions (security and share, not GPO) no longer have effect. It is almost like linking the user to a MS Account prevents the computer that is sharing the file from seeing the user as part of the authorized group.

    The only conclusion I can come to is I have to choose between group share permissions or OneDrive in the case of W8.1.
      My System SpecsSystem Spec

  8. #8


    Central IL
    Posts : 3,468
    Linux Mint 17.2


    If you are playing in the Group Policy, you have been messing around with GPO. You ended up causing a problem that can only now be resolved by reinstalling the OS. Due to how bad you have made the problem.
      My System SpecsSystem Spec

  9. #9


    Posts : 16
    Windows 8.1


    Ahh ok I see, I mis-spoke in the first post, I meant group permissions; as in the group fish has RW access to the fish bowl share/folder. GPO has not been touched on either of the computers, the only things that have been done are what was outlined.


    - Add group Fish
    - Add users (Fish1, Fish2, Fish3)
    - Add users to group Fish
    - Shared folder "Fish Bowl"
    - Gave group Fish Full Control of Fish Bowl folder in security tab
    - Specified group Fish has full control of Fish Bowl at the share level too
    = At this point all members of the Fish group (Fish1, Fish2, Fish3) can RW in the Fish Bowl folder
    - Link MS Account to Fish1
    = Fish1 is no longer able to write to the Fish Bowl, while Fish2 and Fish3 still can
    - Unlink MS Account from Fish1
    = Fish1 is once again able to write to the Fish Bowl
    - Link MS Account to Fish1
    = Fish1 is no longer able to write to the Fish Bowl, while Fish2 and Fish3 still can
    - Give explicit permissions to Fish1 (security and share)
    = Fish1 is once again able to write to the Fish Bowl


    I will correct the first post and replace the work policy with permissions.
    Last edited by eldonmcguinness; 26 Aug 2014 at 17:45.
      My System SpecsSystem Spec

  10. #10


    Central IL
    Posts : 3,468
    Linux Mint 17.2


    Still messing with group permissions, you have broken the OS. The only way to fix, is to reinstall it. All you need to do to create local accounts, is create them after you create the initial Live account. Then once you get done creating the accounts, log into them, so the OS can build the profile.

    You do need Pro version of Windows 8.1.x, so that you can change permissions of those personal folders, you do not want certain users to have access to.

    Going into the Policy and making one up, or editing the pre-existing GPO, will break the OS. Which will not achieve anything for you.

    Personally I would keep everyone's personal files on their own personal file share on a NAS. Then just change the location of their My Documents folder to the mapped Network folder location. You do not have to go into Command, or any other way to do this. It can all be done from the gui interface.
      My System SpecsSystem Spec

Page 1 of 3 123 LastLast
W8.1 File Sharing with Group Permissions and MsftAcct
Related Threads
Yesterday I removed Windows 7 & did a clear install of Windows 8.1 x64. Now whenever I try to save a file on different partition like D,E, etc I get the dialog box that I do not have permissions to save the file to this location even though I am clearly the administrator & I have disabled UAC. All...
Hi, I have two networked PCs. On PC1, I have a program file (.exe) that I want PC2 to be able to access, open and use, but not copy or move from it's location. What would be the best permission settings to adjust on PC1 to protect the file? Thx.
I'm having trouble with the environment configuration on my new Win8 machine, I don't remember running into problems like this on 7, but I can't seem to find much useful online.. I have 4 dll files that need to go into the Windows\System32 folder in order for one of our applications to run. This...
Sharing Permissions in Network & Sharing
If have a few drives and folders shared through my home network and i have some issues with passwords. When i access my shares from another pc, it will not ask for a password even though i shared it with the standard sharing i i left the homegroup. I also deleted the "everyone" permission from the...
File Permissions and Read Only in Network & Sharing
Two user accounts, both administrator level. I have a file in my documents that my wife's account can READ but cannot SAVE. I've gone in through User Accounts and given her account full permissions (full control with all the boxes checked), but it always reverts back to her not being able to save...
Hello. Two questions I'm seeking help with. Relatively minor, but I'd like to learn how this stuff works, so... I have two near-identical Dell PCs, freshly upgraded with SSDs and Win8 Pro. I have a habit of saving a text file in C:\ root to log basic install info. For some reason, on one...
File permissions issues in General Support
For whatever reason, the default account reports that it is an admin account, but it doesn't always act like it. I have 3 SATA drives, each partitioned in 2 (all NTFS), C/D, E/F and G/H. C had Windows 7 installed on it and it was running fine. I tried the CP in Virtualbox when it was released...
Eight Forums Android App Eight Forums IOS App Follow us on Facebook