Having created the Windows 2003 Server and joined it to the 'allen-coding.co.uk' domain, I have been transferring files over to find people can remove files despite my duplication of securities on all files and folders. It is looking that having installed this server I will have to upgrade the domain controllers to 2003 to maintain the require protection of files and folders.
Example.
Quality documents are physically held on D:\Quality folder, share name Quality
Share Permissions :
'Everyone' Change & Read rights
Security settings :
Allen Users Read & Execute, List Folder Contents, Read
Allen Quality Modify, Read & Execute, List Folder Contents, Read, Write
There are two subfolders, 'Active' and 'Draft'. The 'Active' folder inherits the securities. The 'Draft' has had inheritance turned off, with following changes to Allen Users
Allen Users can also, Modify, Read & Execute, Read, Write.
User 'test.man' is part of the Allen Users security group
User 'mark.ryan' is part of the Allen Quality security group.
'test.man' makes document in the 'draft' folder and informs 'mark.ryan', he then moves the document to 'active'. Now 'test.man' goes into the 'active' folder and modifies the document, then delete's it. This is NOT what is to happen, 'test.man' should only be able to read the document.
Start Free Trial
