Solved

Restrict file permissions in windows 2003

Posted on 2006-11-30
3
258 Views
Last Modified: 2008-02-01
I suppose there is a first time for everthing, but this I'll bet is not one of those....namely for a quick 500, who can tell me the easiest way to modify share/security permissions to a folder allowing one person the right to modify files located within that folder, whilst maintaining read only ability for all others? Huh, huh, come on, I'm waiting!!!:)

Cheers
0
Comment
Question by:MatrixZG
  • 2
3 Comments
 
LVL 83

Expert Comment

by:oBdA
ID: 18048212
Set the share permissions to Full control for Everyone and forget about them; do the rest with NTFS.
Assuming that "all others" already have only read-only permissions, and you only want to add the "one person", a simple cacls command will do. Open a command prompt, cd into the root folder where the folder to be changed is located and enter
cacls /t /e /g YourDomain\TheUser:C
/t will process subfolders, /e will edit the ACLs (instead of replacing), /g ... grants the TheUser Change permissions.
Note that you should only give permissions to single user accounts when you have really good reasons to do so (home folders, for example). For everything else, use groups.
0
 
LVL 6

Accepted Solution

by:
d50041 earned 500 total points
ID: 18048443
I do this often

After setting the share permissions to full control go to the security tab
Select Advanced
Unmark the box Inherent from parent.....
Select OK
Then move back to the properties dialog box, don't stay in the Advanced box.
Delete everybod that you don't want to have access, I leave System and Domain admins myself.
Add the Grouop that needs Read Only
Add the Group that needs Full Control

That's All
0
 
LVL 6

Expert Comment

by:d50041
ID: 18048487
Whoops

After deselecting the Inheret box then the correct choice is "Copy"
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I guess it is not common knowledge to most Wintel engineers/administrators: If you have an SNMP-based monitoring system in your environment (and it's common to have SNMP or Syslog) it's reasonably easy to enable monitoring of the Windows Event logs,…
Numerous times I have been asked this questions that what is it that makes my machine log on so slow, there have been cases where computers took 23 minute exactly after taking password and getting to the desktop. Interesting thing was the fact th…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, just open a new email message. In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Although Jacob Bernoulli (1654-1705) has been credited as the creator of "Binomial Distribution Table", Gottfried Leibniz (1646-1716) did his dissertation on the subject in 1666; Leibniz you may recall is the co-inventor of "Calculus" and beat Isaac…

813 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now