delegate control of folder rights to departmental personnel

Posted on 2004-10-13
Last Modified: 2006-11-17
How do I delegate to departmental user to administrate their folder rights?  Thanks.
Question by:PSCheng51
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
LVL 18

Expert Comment

ID: 12297264
I'm a little confused at what you're asking. Maybe if you could provide some information on what you mean by "their folder" and what exactly you want them to administrate?

As a basic answer, you use NTFS permissions to control who has access to a folder and what kind of access they, execute, write, delete, etc.

Author Comment

ID: 12297340
We have request from Engineering management that we (IT) delegate admin rights to Engineering managers so they can administrate Engineering data folders rights as who have read access and who has write rights.  I would like to know if that can be done either via admin tool or mmc snap ins.  The only way I know how is through terminal service and provide them control rights so they can make changes.  Is there any other way?  Thanks.
LVL 18

Expert Comment

ID: 12297751
They don't need "admin" rights on the system in order to do this.

If you don't have it already, create a folder and name it something like "engineering" and place all of the engineering data folders inside that folder so that they are child objects to the parent folder. Set the NTFS security permissions on the parent folder (engineering) to allow full control to the engineering managers. (I would create a security group called "engineering managers" and add all mangers to this group and then assign the permissions to the group). The mangers would then have full control of all folders within the parent folder.
How Do You Stack Up Against Your Peers?

With today’s modern enterprise so dependent on digital infrastructures, the impact of major incidents has increased dramatically. Grab the report now to gain insight into how your organization ranks against your peers and learn best-in-class strategies to resolve incidents.

LVL 18

Expert Comment

ID: 12297940
Then the managers would have to disallow inherit permissions from the parent folder in order to change read/write access for the users.

Author Comment

ID: 12298031
Got it.  Thanks.

Is Terminal Services the only way for them to access server drive from their personal PC?  I can not logon via terminal service as a user, I get "the local policy of this syetem prevent you from logon interactively".  I make sure the user is alkowed to user terminal services and I ran gredit.msc on the PC to add the user in security to allow logon.  What am I missing?  Thanks.
LVL 18

Accepted Solution

luv2smile earned 125 total points
ID: 12298135
They can simply map the drive...they don't need terminal services to get to it

Right click my computer- map network drive- choose a drive letter and then type \\server\share

The error you're getting is a security can change it locally for a specific computer or for all computers using group policy.

Computer configuration- windows settings- security settings- local policies- user rights- log on locally (and give the rights to the appropriate people)


Author Comment

ID: 12298186
Great, Thanks.

Featured Post

Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

So you have two Windows Servers and you have a directory/folder/files on one that you'd like to mirror to the other?  You don't really want to deal with DFS or a 3rd party solution like Doubletake. You can use Robocopy from the Windows Server 200…
The HP utility "HP Lights-Out Online Configuration Utility for Windows Server 2003/2008" could be of great use when it comes to remotely configure a HP servers ILO WITHOUT rebooting the server. We would only need to create and run scripts using thi…
In a recent question ( here at Experts Exchange, a member asked how to run an AutoHotkey script (.AHK) directly from Notepad++ (aka NPP). This video…
Finding and deleting duplicate (picture) files can be a time consuming task. My wife and I, our three kids and their families all share one dilemma: Managing our pictures. Between desktops, laptops, phones, tablets, and cameras; over the last decade…

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question