Link to home
Start Free TrialLog in
Avatar of Daniel Booker
Daniel BookerFlag for United States of America

asked on

Allow users to set security on files they create for other users.

Running Server 2012 Standard.

I'm looking for a program that can remotely give users the ability to set security permissions on files server. I remember seeing something somewhere were they would web base in > click the file > choose the users they wanted with check boxes (would list all the users) > then choose a check box for either read, write, and/or delete.

I do NOT want the users to use the standard Microsoft permissions, because that will be to hard for them and their heads will explode looking at it.

If i cant find anything I guess I'll just have them use dropbox.
Avatar of David Johnson, CD
David Johnson, CD
Flag of Canada image

I do NOT want the users to use the standard Microsoft permissions, because that will be to hard for them and their heads will explode looking at it.

NTFS permissions can be confusing but you could hide it from the user using a bespoke application that uses radio buttons instead.. allows the user to create their own groups pulling usernames from AD and then apply the appropriate permissions on the object.
Wild-hair idea, but what if the owner could drop the file(s) into one of three directories -- one having no access, one having read access, the third with read-write?  Object permissions inherit the folder permissions.

In SharePoint, the similar approach might be to post private items, sharable private items, or public items.
Avatar of Daniel Booker

ASKER

I've discussed this with them, but they want to make sure employee A can send the file to employee C and B can not know that it has happened.
ASKER CERTIFIED SOLUTION
Avatar of David VanZandt
David VanZandt
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Well since they have 20 users and one person wants to send to 1 of the other 1/20 people then there would be what like 20^20 folders needed to be created not even including whatever new people come on board?
I've requested that this question be deleted for the following reason:

Did not find a solution to question asked.
I fully understand my interaction did not provide the desired answer.  Given the requirement to rule out the O/S security, there are such questions such as this that the solution is indeed, "you can't do that".  In the client's first statement the use of dropbox was mentioned as an alternative, which I tried to address in ID: 40115713.

Commonly, a question may be withdrawn if the asker posts their own detailed solution.  I will ask the zone moderator to weigh in on your request.  Before that decision is made, however, I'd like to ask the moderator to ping other experts on the asker's behalf.
Sure, just post the software solution given the parameters of my question and I'll be happy to give you credit for a solution.
Sure, we can leave the question open. Normally though when I get a email saying no one has responded to the question in a while or there has been no activity then usually the question I've asked becomes dead unless I re-post it.
A solution for sharing files that is used by many lawyers and people that require a minimum of user knowledge is sharefile.com by citrix.  it has a plugin for outlook and you can see when and by whom the file was downloaded and set expiry dates.
Sharepoint is able to do exactly what you want.
Here is a link to an article about a free NTFS Permissions Tool: http://www.ghacks.net/2011/05/24/ntfs-permissions-tools/
It looks like it fits your needs exactly; but, I'd be very careful about letting people set permissions on a willy nilly basis.
DavisMcCarn
That tool looks perfect! I just need to test it out first.
DavisMcCarn
Ah that tool only lets you set owners based on what users are on your local computer and I do not see a way to set it to look at the server's users list :( . That tool almost did exactly what i wanted though.
So set them up with an RDP icon that runs the tool on the server and logs them off when they close it.
They don't have a terminal server to let them do that.
Did you consider Sharepoint for this?  It can do exactly what you need and is used by organizations to allow people manage and maintain document libraries, permissions to files, etc.
craigbeck
I could be wrong about this, but doesn't the sharepoint software cost about $3,000 not including the user license? Was really hoping for a solution under $500-700
You are correct, it is expensive.

Have you looked at Alfresco?  It has a free community version (unsupported) which has document management features.

http://www.alfresco.com/products/community
Never heard of it. I'll look into it.
This has been an interesting thread.  The topic started with "a program that can remotely give users the ability to set security permissions on files server" -- but simpler than having individuals remotely manipulate Windows security.  In the subsequent exchange:
"they want to make sure employee A can send the file to employee C and B can not know that it has happened"
"they don't have a terminal server"
"...hoping for a solution under $500-700"

BTW craigbeck, I had suggested SharePoint back in (ID: 40103205) to no avail.

I had also thought about and ruled out using email to send document copies to the selected recipients (as blind carbon copies (BCC)).   Pro, it's the only tool I'm aware of that can list the set of all available email addresses.  Con for the same reason -- PII exposure.  Also it's messy, with non-authoritative, uncontrolled copies consuming more and more storage.

That leads me back to another earlier suggestion, cloud storage.  Both Google Docs and Microsoft OneDrive allow files to be uploaded.  The author can then assign read, edit, or owner permissions to individuals, so that employee B is not given the private URL.  The file storage is backed up, the files versioned, the owner(s) remain in control, and for many users, the solution is free -- additional storage may be leased.  Refer to the links for specifics.

My last word to Easyworks is that we experts are all volunteers; points are our only tips.  I happen to be in my 16th year of volunteering.  It's not the points that matter, rather it's the wisdom we give away to help others learn.  My ideas have not pleased you, fine.  Just maybe, when you re-post this, the problem statement, supporting details, constraints, will be made clear up front, and you will be far more satisfied with the result.

dvz
I know that @dvz I was merely supplementing what you said.  Sharepoint  is a great solution.
Not really the solution I was looking for but a better alternative than drop box.