Solved

delegate control of folder rights to departmental personnel

Posted on 2004-10-13
7
310 Views
Last Modified: 2006-11-17
How do I delegate to departmental user to administrate their folder rights?  Thanks.
0
Comment
Question by:PSCheng51
  • 4
  • 3
7 Comments
 
LVL 18

Expert Comment

by:luv2smile
ID: 12297264
I'm a little confused at what you're asking. Maybe if you could provide some information on what you mean by "their folder" and what exactly you want them to administrate?

As a basic answer, you use NTFS permissions to control who has access to a folder and what kind of access they have....read, execute, write, delete, etc.
0
 

Author Comment

by:PSCheng51
ID: 12297340
We have request from Engineering management that we (IT) delegate admin rights to Engineering managers so they can administrate Engineering data folders rights as who have read access and who has write rights.  I would like to know if that can be done either via admin tool or mmc snap ins.  The only way I know how is through terminal service and provide them control rights so they can make changes.  Is there any other way?  Thanks.
0
 
LVL 18

Expert Comment

by:luv2smile
ID: 12297751
They don't need "admin" rights on the system in order to do this.

If you don't have it already, create a folder and name it something like "engineering" and place all of the engineering data folders inside that folder so that they are child objects to the parent folder. Set the NTFS security permissions on the parent folder (engineering) to allow full control to the engineering managers. (I would create a security group called "engineering managers" and add all mangers to this group and then assign the permissions to the group). The mangers would then have full control of all folders within the parent folder.
0
Backup Your Microsoft Windows Server®

Backup all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

 
LVL 18

Expert Comment

by:luv2smile
ID: 12297940
Then the managers would have to disallow inherit permissions from the parent folder in order to change read/write access for the users.
0
 

Author Comment

by:PSCheng51
ID: 12298031
Got it.  Thanks.

Is Terminal Services the only way for them to access server drive from their personal PC?  I can not logon via terminal service as a user, I get "the local policy of this syetem prevent you from logon interactively".  I make sure the user is alkowed to user terminal services and I ran gredit.msc on the PC to add the user in security to allow logon.  What am I missing?  Thanks.
0
 
LVL 18

Accepted Solution

by:
luv2smile earned 125 total points
ID: 12298135
They can simply map the drive...they don't need terminal services to get to it

Right click my computer- map network drive- choose a drive letter and then type \\server\share

The error you're getting is a security policy...you can change it locally for a specific computer or for all computers using group policy.

Computer configuration- windows settings- security settings- local policies- user rights- log on locally (and give the rights to the appropriate people)


0
 

Author Comment

by:PSCheng51
ID: 12298186
Great, Thanks.
0

Featured Post

Maximize Your Threat Intelligence Reporting

Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

Join & Write a Comment

Preface Having the need * to contact many different companies with different infrastructures * do remote maintenance in their network required us to implement a more flexible routing solution. As RAS, PPTP, L2TP and VPN Client connections are no…
by Batuhan Cetin Within the dynamic life of an IT administrator, we hold many information in our minds like user names, passwords, IDs, phone numbers, incomes, service tags, bills and the order from our wives to buy milk when coming back to home.…
This video discusses moving either the default database or any database to a new volume.
This tutorial demonstrates a quick way of adding group price to multiple Magento products.

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now