Solved

delegate control of folder rights to departmental personnel

Posted on 2004-10-13
7
314 Views
Last Modified: 2006-11-17
How do I delegate to departmental user to administrate their folder rights?  Thanks.
0
Comment
Question by:PSCheng51
  • 4
  • 3
7 Comments
 
LVL 18

Expert Comment

by:luv2smile
ID: 12297264
I'm a little confused at what you're asking. Maybe if you could provide some information on what you mean by "their folder" and what exactly you want them to administrate?

As a basic answer, you use NTFS permissions to control who has access to a folder and what kind of access they have....read, execute, write, delete, etc.
0
 

Author Comment

by:PSCheng51
ID: 12297340
We have request from Engineering management that we (IT) delegate admin rights to Engineering managers so they can administrate Engineering data folders rights as who have read access and who has write rights.  I would like to know if that can be done either via admin tool or mmc snap ins.  The only way I know how is through terminal service and provide them control rights so they can make changes.  Is there any other way?  Thanks.
0
 
LVL 18

Expert Comment

by:luv2smile
ID: 12297751
They don't need "admin" rights on the system in order to do this.

If you don't have it already, create a folder and name it something like "engineering" and place all of the engineering data folders inside that folder so that they are child objects to the parent folder. Set the NTFS security permissions on the parent folder (engineering) to allow full control to the engineering managers. (I would create a security group called "engineering managers" and add all mangers to this group and then assign the permissions to the group). The mangers would then have full control of all folders within the parent folder.
0
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 18

Expert Comment

by:luv2smile
ID: 12297940
Then the managers would have to disallow inherit permissions from the parent folder in order to change read/write access for the users.
0
 

Author Comment

by:PSCheng51
ID: 12298031
Got it.  Thanks.

Is Terminal Services the only way for them to access server drive from their personal PC?  I can not logon via terminal service as a user, I get "the local policy of this syetem prevent you from logon interactively".  I make sure the user is alkowed to user terminal services and I ran gredit.msc on the PC to add the user in security to allow logon.  What am I missing?  Thanks.
0
 
LVL 18

Accepted Solution

by:
luv2smile earned 125 total points
ID: 12298135
They can simply map the drive...they don't need terminal services to get to it

Right click my computer- map network drive- choose a drive letter and then type \\server\share

The error you're getting is a security policy...you can change it locally for a specific computer or for all computers using group policy.

Computer configuration- windows settings- security settings- local policies- user rights- log on locally (and give the rights to the appropriate people)


0
 

Author Comment

by:PSCheng51
ID: 12298186
Great, Thanks.
0

Featured Post

U.S. Department of Agriculture and Acronis Access

With the new era of mobile computing, smartphones and tablets, wireless communications and cloud services, the USDA sought to take advantage of a mobilized workforce and the blurring lines between personal and corporate computing resources.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

by Batuhan Cetin Within the dynamic life of an IT administrator, we hold many information in our minds like user names, passwords, IDs, phone numbers, incomes, service tags, bills and the order from our wives to buy milk when coming back to home.…
I guess it is not common knowledge to most Wintel engineers/administrators: If you have an SNMP-based monitoring system in your environment (and it's common to have SNMP or Syslog) it's reasonably easy to enable monitoring of the Windows Event logs,…
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…
In a recent question (https://www.experts-exchange.com/questions/29004105/Run-AutoHotkey-script-directly-from-Notepad.html) here at Experts Exchange, a member asked how to run an AutoHotkey script (.AHK) directly from Notepad++ (aka NPP). This video…

680 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question