Hi Lee,
am I correct you're speaking about subfolders created by the users?
Then this behaviour is correct. The user, which created the folder, is
the owner of this folder. And as owner you can change the rights, even
break the inheritance.
Regards
Ingo
https://github.com/WAdama
Lee Underwood via samba schrieb am 21.08.2025 um 20:24:> Team
>
> Permissions work but users can change their modify permissions to full
> control via Windows security tab.
> Windows users with Modify can disable inheritance via Windows security tab
> on second folders.
>
> Windows users only have Modify.
>
> Disable Modify and they are unable to change permissions and disable
> Inheritance but now they cannot create folders with Read, write and list on
> second folder.
>
> The first folder works with the above permissions, but the second folders
> fail even though permissions flow with the correct permissions. Inheritance
> enabled.
>
> Both source and destination folders are identical with inheritance and
> permissions.
>
> Users are stopped on source and cannot Modify permissions nor disable
> inheritance. Works correctly.
> Second folder with inheritance and same rights the users can change. Add
> full control and break inheritance.
>
> What am I missing?
>
> Lee