Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 321
  • Last Modified:

delegate control of folder rights to departmental personnel

How do I delegate to departmental user to administrate their folder rights?  Thanks.
0
PSCheng51
Asked:
PSCheng51
  • 4
  • 3
1 Solution
 
luv2smileCommented:
I'm a little confused at what you're asking. Maybe if you could provide some information on what you mean by "their folder" and what exactly you want them to administrate?

As a basic answer, you use NTFS permissions to control who has access to a folder and what kind of access they have....read, execute, write, delete, etc.
0
 
PSCheng51Author Commented:
We have request from Engineering management that we (IT) delegate admin rights to Engineering managers so they can administrate Engineering data folders rights as who have read access and who has write rights.  I would like to know if that can be done either via admin tool or mmc snap ins.  The only way I know how is through terminal service and provide them control rights so they can make changes.  Is there any other way?  Thanks.
0
 
luv2smileCommented:
They don't need "admin" rights on the system in order to do this.

If you don't have it already, create a folder and name it something like "engineering" and place all of the engineering data folders inside that folder so that they are child objects to the parent folder. Set the NTFS security permissions on the parent folder (engineering) to allow full control to the engineering managers. (I would create a security group called "engineering managers" and add all mangers to this group and then assign the permissions to the group). The mangers would then have full control of all folders within the parent folder.
0
Configuration Guide and Best Practices

Read the guide to learn how to orchestrate Data ONTAP, create application-consistent backups and enable fast recovery from NetApp storage snapshots. Version 9.5 also contains performance and scalability enhancements to meet the needs of the largest enterprise environments.

 
luv2smileCommented:
Then the managers would have to disallow inherit permissions from the parent folder in order to change read/write access for the users.
0
 
PSCheng51Author Commented:
Got it.  Thanks.

Is Terminal Services the only way for them to access server drive from their personal PC?  I can not logon via terminal service as a user, I get "the local policy of this syetem prevent you from logon interactively".  I make sure the user is alkowed to user terminal services and I ran gredit.msc on the PC to add the user in security to allow logon.  What am I missing?  Thanks.
0
 
luv2smileCommented:
They can simply map the drive...they don't need terminal services to get to it

Right click my computer- map network drive- choose a drive letter and then type \\server\share

The error you're getting is a security policy...you can change it locally for a specific computer or for all computers using group policy.

Computer configuration- windows settings- security settings- local policies- user rights- log on locally (and give the rights to the appropriate people)


0
 
PSCheng51Author Commented:
Great, Thanks.
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 4
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now