delegate control of folder rights to departmental personnel

How do I delegate to departmental user to administrate their folder rights?  Thanks.
PSCheng51Asked:
Who is Participating?
 
luv2smileCommented:
They can simply map the drive...they don't need terminal services to get to it

Right click my computer- map network drive- choose a drive letter and then type \\server\share

The error you're getting is a security policy...you can change it locally for a specific computer or for all computers using group policy.

Computer configuration- windows settings- security settings- local policies- user rights- log on locally (and give the rights to the appropriate people)


0
 
luv2smileCommented:
I'm a little confused at what you're asking. Maybe if you could provide some information on what you mean by "their folder" and what exactly you want them to administrate?

As a basic answer, you use NTFS permissions to control who has access to a folder and what kind of access they have....read, execute, write, delete, etc.
0
 
PSCheng51Author Commented:
We have request from Engineering management that we (IT) delegate admin rights to Engineering managers so they can administrate Engineering data folders rights as who have read access and who has write rights.  I would like to know if that can be done either via admin tool or mmc snap ins.  The only way I know how is through terminal service and provide them control rights so they can make changes.  Is there any other way?  Thanks.
0
Cloud Class® Course: Microsoft Exchange Server

The MCTS: Microsoft Exchange Server 2010 certification validates your skills in supporting the maintenance and administration of the Exchange servers in an enterprise environment. Learn everything you need to know with this course.

 
luv2smileCommented:
They don't need "admin" rights on the system in order to do this.

If you don't have it already, create a folder and name it something like "engineering" and place all of the engineering data folders inside that folder so that they are child objects to the parent folder. Set the NTFS security permissions on the parent folder (engineering) to allow full control to the engineering managers. (I would create a security group called "engineering managers" and add all mangers to this group and then assign the permissions to the group). The mangers would then have full control of all folders within the parent folder.
0
 
luv2smileCommented:
Then the managers would have to disallow inherit permissions from the parent folder in order to change read/write access for the users.
0
 
PSCheng51Author Commented:
Got it.  Thanks.

Is Terminal Services the only way for them to access server drive from their personal PC?  I can not logon via terminal service as a user, I get "the local policy of this syetem prevent you from logon interactively".  I make sure the user is alkowed to user terminal services and I ran gredit.msc on the PC to add the user in security to allow logon.  What am I missing?  Thanks.
0
 
PSCheng51Author Commented:
Great, Thanks.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.