Solved

Permissions question

Posted on 2007-04-03
4
163 Views
Last Modified: 2013-12-04
I have some software files residing in an NTFS share on our server - I'd like to restrict access to this share to everyone except a certain randomly changing group of people.

My goal is to create a user account for this purpose, assign certain share/ntfs permissions to the folder allowing only access to domain admins and the newly created user, meaning if somebody who is not a domain admin tries to access the folder they'll be prompted for a user name and password, they would then supply the details of the newly created account.

Please can somebody advise what share and ntfs permsissions I need to assign to the folder.
0
Comment
Question by:kestrel05
4 Comments
 
LVL 27

Accepted Solution

by:
michko earned 63 total points
ID: 18847257
You could do it that way and just assign full permissions to the domain admins and whatever permissions you wanted (full, read, modify, write) to the user id you created.  Problem I can see is you're going to be deleting and adding a new user id every time someone drops out of your "randomly changing group of people".

You may be better off creating a group (call it FolderShare, MyGroup, whatever) with the permissions you want to this folder.  You can then add and remove users from this group.  Then the people who have access can just get to it, while those who don't have access will be denied.

Link on setting user and group security:
http://technet2.microsoft.com/WindowsServer/en/library/740d097f-c7f8-448c-a70c-d75ac2b2c9961033.mspx?mfr=true

Link on applying or modifying permissions:
http://technet2.microsoft.com/WindowsServer/en/library/1687ef1d-b382-49c7-b184-a4cc888be5251033.mspx?mfr=true
0
 
LVL 3

Assisted Solution

by:odomok07
odomok07 earned 62 total points
ID: 18991930
It is always better to create a group and assign rights to that group.  Than it is to assign rights to users.

Create a share on the folders that you wish to share.  Create a group that can access that share.  Assign the rights that you wish to that group.  Add and remove users as they come and go to that group that you have created and assigned rights to.
0
 
LVL 1

Expert Comment

by:Computer101
ID: 21185791
Forced accept.

Computer101
EE Admin
0

Featured Post

Get up to 2TB FREE CLOUD per backup license!

An exclusive Black Friday offer just for Expert Exchange audience! Buy any of our top-rated backup solutions & get up to 2TB free cloud per system! Perform local & cloud backup in the same step, and restore instantly—anytime, anywhere. Grab this deal now before it disappears!

Join & Write a Comment

Suggested Solutions

No security measures warrant 100% as a "silver bullet". The truth is we also cannot assume anything but a defensive and vigilance posture. Adopt no trust by default and reveal in assumption. Only assume anonymity or invisibility in the reverse. Safe…
Recently, I read that Microsoft has analysed statistics for their security intelligence report. It revealed: still, the clear majority of windows users do their daily work as administrator. An administrative account is a burden, security-wise. My ar…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now