Solved

file shares NTFS

Posted on 2004-09-30
5
204 Views
Last Modified: 2011-04-14
What is the best method for assigning permissions to a subfolder within a share

Shared folder has permissions everyone FULL, and NTFS Authenticated Users (everything but Full control)

Beneath the share is about 10 subfolders that inherited the permissions of the share.  One of the subfolders need to have special access - only access from a specific group

I know it is proper to configure shares as AGLP, but this doesn't seem to follow that process because it is a subfolder.  

What is the best method for handling these types of share issues.  Create an additional share from the folder and assign it permissions?

Thanks

0
Comment
Question by:vivo123
  • 3
  • 2
5 Comments
 
LVL 76

Accepted Solution

by:
David Lee earned 125 total points
ID: 12196497
If the permissions on a single folder under a share needs to be changed, then in my opinion the best way to handle it is to block inheritance at that folder and alter the permissions to whatever they need to be.
0
 

Author Comment

by:vivo123
ID: 12199813
should I assign just the users that need access or create a G Group and assign that to the folder under the share.  

It seems that I should only assign users, but I want to follow proper methods.

Thanks
0
 
LVL 76

Expert Comment

by:David Lee
ID: 12199873
It's always best to assign permissions to groups, not individuals.  I'd create a group, add the necessary user accounts to it, and grant that group permissions.
0
 

Author Comment

by:vivo123
ID: 12200993
Thanks again..  one more thing, I know I am beating this to death.. On a single folder under a share would you just assign a global group permissions to that folder, or would you actually assign a DL group or Lgroup and assign the global group to that DL or Lgroup even though it is not the main share.  Or do you only assign the DL or Lgroup w/ the appropriate GGgroup to the MAIN Share.

Hope this makes sense..
0
 
LVL 76

Expert Comment

by:David Lee
ID: 12201805
I wouldn't start nesting groups unless there's a compelling reason to do so.  For example, if you're in a multiple domain environment and some folks from another domain need access to the share also.  
0

Featured Post

Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
How do we balance the user experience (UX) with reasonable security measures? It can be done, if you keep these fundamentals in mind.
This tutorial gives a high-level tour of the interface of Marketo (a marketing automation tool to help businesses track and engage prospective customers and drive them to purchase). You will see the main areas including Marketing Activities, Design …
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…

786 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question