Link to home
Start Free TrialLog in
Avatar of marvelsoft
marvelsoftFlag for Philippines

asked on

Sharing and Security of Folder

Experts,

Please help me on this problem about sharing a particular folder. I have a main folder "MAIN" and sub-folders "user1", "user2" and "user3". The MAIN folder is shared, and each subfolders is accessible by their own user account e.g. user_a, user_b, user_c with full access.

Users "user_a, user_b, user_c" is only a user level.

Is this possible in win server 2003?

Thank you very much.

Marvel
Avatar of Michael Pfister
Michael Pfister
Flag of Germany image

The share of MAIN needs permissions: Users (or Everyone) FULL CONTROL
On each subfolder change the NTFS permissions to allow access only for the particular user (and maybe the Administrator).
Marvel,

of course this is possible. Thats what MS Windows Server is there for. ;-)

Share folder MAIN and give read access to the share (share permissions and folder permissions) to all users (better put them all in a group an give permissions to the group) that should have access to their user folders. Create the subfolders user_a, user_b and so on. Set folder permissions so that only these user have the appropriate rights on their folders, i. e. remove all other permissions.

Hope this helps,
Daniel
Sorry,

of course you need change permission on the share. Otherwise users would not be allowed to write to their folders. I my opinion FULL CONTROL is too much and should not be used if it can be avoided.

Daniel
ASKER CERTIFIED SOLUTION
Avatar of TheCleaner
TheCleaner
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Forgot to include that NTFS permissions on the MAIN folder should be Domain Admins - Full Control and Everyone - list folder contents ONLY IF you want them to map the drive to \\server\MAIN.

If you are mapping straight to \\server\MAIN\user1

then you don't need any NTFS perms on MAIN except for Domain Admins - Full Control (assuming that bypass traverse checking is enabled, which it is by default).
Thanks for the points...(the others had correct answers too).