Solved

Permissions/ Security

Posted on 2006-07-13
7
300 Views
Last Modified: 2011-09-20
Is it better to use security to a folder or share a folder and use folder permissions?  This folder is for the budget and only certain people need to see certain stuff.

I am wondering if I should share the folders and then just give permissions or should I not share the folders and set up security?  
0
Comment
Question by:mputnam31
7 Comments
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 17104407
to access it across the network you will need to share it - so share it and then play with NTFS permissions on the folder itself
0
 
LVL 1

Author Comment

by:mputnam31
ID: 17104435
This is setup:

Budget
   Budget fiscal year 2007
             Folder 1
0
 
LVL 1

Author Comment

by:mputnam31
ID: 17104462
Wasnt' finished...
Bduget
   Budget fiscal year 2007
          Folder 1
                Subfolder 1
                   Subsubfolder 1
                       Files
                Subfolder 2
                       Files

           Folder 2
                Subfolder 1
                       Files

The budget folder is shared, the rest are not. The folders that are not shared have security on them.


Should I keep it like this or share out all the folders under Budget?

How should I inherit permissions?

         
 
0
Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 17104613
that way looks good to me, put NTFS permissions on the sub folders

inherit as you see fit, you may not want to inherit anything depending on the security you want.....
0
 
LVL 1

Author Comment

by:mputnam31
ID: 17104705
I don't want anyone to see any other folder unless I give them rights.  This is not working for me.  I shared the top budget folder and gave "everyone" rights to all three full control change and read.

In the security tab I have administrators, creator owner with nothing, everyone with all rights except full, system with all rights, and users with read & execute, list folder contents and read.  Every folder down the tree has the same security.


I am really lost here, this is not working.  I simply want specfiic groups (ie Budget_Food.. to only see their budget spreadsheet for food).

HELP


0
 
LVL 1

Expert Comment

by:bibmed
ID: 17106052
Windows Server 2003 Access-based Enumeration makes visible only those files or folders that the user has the rights to access. When Access-based Enumeration is enabled, Windows will not display files or folders that the user does not have the rights to access. This download provides a GUI and a CLI that enables this feature.

http://www.microsoft.com/downloads/details.aspx?FamilyId=04A563D9-78D9-4342-A485-B030AC442084&displaylang=en
0
 
LVL 2

Accepted Solution

by:
SkUllbloCk earned 500 total points
ID: 17106859
Here are the best practice steps:

1. share the folder allowing all the groups access to the folder.
2. set NTFS permissions on the shared folder as well, just to make sure that people logging on locally to the file server cannot change things that they arent meant to.
3. set NTFS permission on the subfolder for read and write access to the folders that each group requires, explicitly set deny permission for the groups that arent meant to access those files.
This will prevent user who have the deny permission set to even see the folders that they arent supposed to see.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Organizations create, modify, and maintain huge amounts of data to help their businesses earn money and generally function.  Typically every network user within an organization has a bit of disk space to store in process items and personal files.   …
While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question