Solved

Permissions/ Security

Posted on 2006-07-13
7
299 Views
Last Modified: 2011-09-20
Is it better to use security to a folder or share a folder and use folder permissions?  This folder is for the budget and only certain people need to see certain stuff.

I am wondering if I should share the folders and then just give permissions or should I not share the folders and set up security?  
0
Comment
Question by:mputnam31
7 Comments
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 17104407
to access it across the network you will need to share it - so share it and then play with NTFS permissions on the folder itself
0
 
LVL 1

Author Comment

by:mputnam31
ID: 17104435
This is setup:

Budget
   Budget fiscal year 2007
             Folder 1
0
 
LVL 1

Author Comment

by:mputnam31
ID: 17104462
Wasnt' finished...
Bduget
   Budget fiscal year 2007
          Folder 1
                Subfolder 1
                   Subsubfolder 1
                       Files
                Subfolder 2
                       Files

           Folder 2
                Subfolder 1
                       Files

The budget folder is shared, the rest are not. The folders that are not shared have security on them.


Should I keep it like this or share out all the folders under Budget?

How should I inherit permissions?

         
 
0
NAS Cloud Backup Strategies

This article explains backup scenarios when using network storage. We review the so-called “3-2-1 strategy” and summarize the methods you can use to send NAS data to the cloud

 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 17104613
that way looks good to me, put NTFS permissions on the sub folders

inherit as you see fit, you may not want to inherit anything depending on the security you want.....
0
 
LVL 1

Author Comment

by:mputnam31
ID: 17104705
I don't want anyone to see any other folder unless I give them rights.  This is not working for me.  I shared the top budget folder and gave "everyone" rights to all three full control change and read.

In the security tab I have administrators, creator owner with nothing, everyone with all rights except full, system with all rights, and users with read & execute, list folder contents and read.  Every folder down the tree has the same security.


I am really lost here, this is not working.  I simply want specfiic groups (ie Budget_Food.. to only see their budget spreadsheet for food).

HELP


0
 
LVL 1

Expert Comment

by:bibmed
ID: 17106052
Windows Server 2003 Access-based Enumeration makes visible only those files or folders that the user has the rights to access. When Access-based Enumeration is enabled, Windows will not display files or folders that the user does not have the rights to access. This download provides a GUI and a CLI that enables this feature.

http://www.microsoft.com/downloads/details.aspx?FamilyId=04A563D9-78D9-4342-A485-B030AC442084&displaylang=en
0
 
LVL 2

Accepted Solution

by:
SkUllbloCk earned 500 total points
ID: 17106859
Here are the best practice steps:

1. share the folder allowing all the groups access to the folder.
2. set NTFS permissions on the shared folder as well, just to make sure that people logging on locally to the file server cannot change things that they arent meant to.
3. set NTFS permission on the subfolder for read and write access to the folders that each group requires, explicitly set deny permission for the groups that arent meant to access those files.
This will prevent user who have the deny permission set to even see the folders that they arent supposed to see.
0

Featured Post

Gigs: Get Your Project Delivered by an Expert

Select from freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely and get projects done right.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Trust one-way issue 2 56
setup share and NTFS permissions. 12 77
Domain Share problems 5 54
Group Policy & Netlogin Services 5 48
Many of us need to configure DHCP server(s) in their environment. We can do that simply via DHCP console on server or using MMC snap-in on each computer with Administrative Tools installed in a network. But what if we have to configure many DHCP ser…
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question