Well, as I was typing this, I figured out the solution... sort of.
I've successfully set up the latest FreeNAS 9.3.1, and I've joined it to the Active Directory domain. I think I finally grasp how to create a dataset for each share. Then share the root of the zvol, and connect a Windows machine to that share, where all the folders for all the other shares will be visible, and you go to the properties of each shared folder and modify permissions there.
What I couldn't figure out was why a user who wasn't given access could not only see, but access files in the shares.
I solved this by right-clicking the shared folder -> Properties -> Advanced -> Change Permissions. Uncheck "Include inheritable permissions..." and check "Replace all child object permissions...." Then remove "Everyone". Apply, and only the authorized users can see and read files!
However, now users who ARE authorized "need permission from [insert username or group of owner here] to make changes to this folder."
Restoring "everyone" to "list folder contents only" doesn't fix it.
Now what?
I've successfully set up the latest FreeNAS 9.3.1, and I've joined it to the Active Directory domain. I think I finally grasp how to create a dataset for each share. Then share the root of the zvol, and connect a Windows machine to that share, where all the folders for all the other shares will be visible, and you go to the properties of each shared folder and modify permissions there.
What I couldn't figure out was why a user who wasn't given access could not only see, but access files in the shares.
I solved this by right-clicking the shared folder -> Properties -> Advanced -> Change Permissions. Uncheck "Include inheritable permissions..." and check "Replace all child object permissions...." Then remove "Everyone". Apply, and only the authorized users can see and read files!
However, now users who ARE authorized "need permission from [insert username or group of owner here] to make changes to this folder."
Restoring "everyone" to "list folder contents only" doesn't fix it.
Now what?
Last edited: