vivo123
asked on
file shares NTFS
What is the best method for assigning permissions to a subfolder within a share
Shared folder has permissions everyone FULL, and NTFS Authenticated Users (everything but Full control)
Beneath the share is about 10 subfolders that inherited the permissions of the share. One of the subfolders need to have special access - only access from a specific group
I know it is proper to configure shares as AGLP, but this doesn't seem to follow that process because it is a subfolder.
What is the best method for handling these types of share issues. Create an additional share from the folder and assign it permissions?
Thanks
Shared folder has permissions everyone FULL, and NTFS Authenticated Users (everything but Full control)
Beneath the share is about 10 subfolders that inherited the permissions of the share. One of the subfolders need to have special access - only access from a specific group
I know it is proper to configure shares as AGLP, but this doesn't seem to follow that process because it is a subfolder.
What is the best method for handling these types of share issues. Create an additional share from the folder and assign it permissions?
Thanks
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
It's always best to assign permissions to groups, not individuals. I'd create a group, add the necessary user accounts to it, and grant that group permissions.
ASKER
Thanks again.. one more thing, I know I am beating this to death.. On a single folder under a share would you just assign a global group permissions to that folder, or would you actually assign a DL group or Lgroup and assign the global group to that DL or Lgroup even though it is not the main share. Or do you only assign the DL or Lgroup w/ the appropriate GGgroup to the MAIN Share.
Hope this makes sense..
Hope this makes sense..
I wouldn't start nesting groups unless there's a compelling reason to do so. For example, if you're in a multiple domain environment and some folks from another domain need access to the share also.
ASKER
It seems that I should only assign users, but I want to follow proper methods.
Thanks