User Group, File permissions

Hi,

   I have a domain setup with the majority of clients in the User group. They as a group need access to certain files and folders on the server. However, I would like to restrict access to their personal files so only the user and admins can see their data. For example, John needs to see company files, but only John would be able to see Johns documents.

Is there a way to do this? or do I have to setup each user in their own group and go from there? Sees like a long and tedious process...any way to make this easy?

Thanks
Tom
ctmtnbkrAsked:
Who is Participating?
 
Pete LongConnect With a Mentor Technical ConsultantCommented:
for the shared folder

set up a group called companyusers put all the users in it
create the company folder
roght click the comapny folder Properties>security>advanced
untick the inherit permissions box
on the warning select copy click ok, ok
roght click the folder again >properties >security
add in the companyusers group and give full control
remove the everyone group, remove the domain users group
ensure administrators and domain administratoes have the appropriate rights

you can do the sub folder in the same way for each user

or in active directory users and computers, on each user select the profile tab
and connect a drive letter like h: to \\servername\companyfolder\%username% and the next time thasy log in the folder will be created with all the correct permissions
0
 
Casca1Commented:
One point on the above: Make sure you aren't already redirecting users home folders and what not. Maybe through a script, or an entry in the same location already does this. Other than that, it would work.
Setting the perms on a per file basis would be impractical, short of scripting.
0
 
Pete LongTechnical ConsultantCommented:
agree (good point) typically I dont like scripting mapping cause the permissions can get a bit bizarre :)
0
Cloud Class® Course: C++ 11 Fundamentals

This course will introduce you to C++ 11 and teach you about syntax fundamentals.

 
Casca1Commented:
KISS; anytime any Win domain admin forgets that, they are in trouble. ;-)
0
 
ctmtnbkrAuthor Commented:
points....i hope
0
 
Pete LongTechnical ConsultantCommented:
ThanQ
0
 
ctmtnbkrAuthor Commented:
let me know if anyone didnt get points...thanks
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.