Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Layer Security Based on Security Groups

Posted on 2004-08-04
3
Medium Priority
?
310 Views
Last Modified: 2010-04-11
OK - I know this can be done, I just forgot how to do it and I can't get it to work.  Here is what I need.  I have one main share mapped to the users profile called p:\public.  Under public there are a number of folders that represent each department.  What I want to do using share permissions and Security assignment, is allow all users access to the "P" drive, but not the ability to write, i.e. create new folders at the top level.  However, I do want to allow the users to write to their own department folders.  Is this possible.  I think this has been done, I just get things muddled up between share and security.  Thanks.  Oh, if you haven't gathered the network is W2K.  
0
Comment
Question by:craryg
3 Comments
 
LVL 5

Accepted Solution

by:
intreeg earned 300 total points
ID: 11721063
The easy solution here is to create multiple shares and permission the independently.

IE. the P:\Public grant Read Only. Then make and Accounting Share, and map on memebers of the Account Dept. to this share allowing them write access. This way the user has two seperate shares. Read on one and Write on the Other.


Otherwise, you will need to set the top level share to read only, AND MAKE SURE THE SUBFOLDER DO NOT INHERIT PERMISSIONS FROM PARENTS! That is the Key. Make sure that the share to P have Full Access, and then use actual folder permission to limit writing to only Admins (or whoever you want) and then permission the subfolder to have write access dependent on user or group.

Either of these should work. Let me know if you have any problems or further questions.
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you’re involved with your company’s wide area network (WAN), you’ve probably heard about SD-WANs. They’re the “boy wonder” of networking, ostensibly allowing companies to replace expensive MPLS lines with low-cost Internet access. But, are they …
In this article, the configuration steps in Zabbix to monitor devices via SNMP will be discussed with some real examples on Cisco Router/Switch, Catalyst Switch, NAS Synology device.
If you're a developer or IT admin, you’re probably tasked with managing multiple websites, servers, applications, and levels of security on a daily basis. While this can be extremely time consuming, it can also be frustrating when systems aren't wor…
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…

971 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question