Permissions question

I have some software files residing in an NTFS share on our server - I'd like to restrict access to this share to everyone except a certain randomly changing group of people.

My goal is to create a user account for this purpose, assign certain share/ntfs permissions to the folder allowing only access to domain admins and the newly created user, meaning if somebody who is not a domain admin tries to access the folder they'll be prompted for a user name and password, they would then supply the details of the newly created account.

Please can somebody advise what share and ntfs permsissions I need to assign to the folder.
kestrel05Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

michkoCommented:
You could do it that way and just assign full permissions to the domain admins and whatever permissions you wanted (full, read, modify, write) to the user id you created.  Problem I can see is you're going to be deleting and adding a new user id every time someone drops out of your "randomly changing group of people".

You may be better off creating a group (call it FolderShare, MyGroup, whatever) with the permissions you want to this folder.  You can then add and remove users from this group.  Then the people who have access can just get to it, while those who don't have access will be denied.

Link on setting user and group security:
http://technet2.microsoft.com/WindowsServer/en/library/740d097f-c7f8-448c-a70c-d75ac2b2c9961033.mspx?mfr=true

Link on applying or modifying permissions:
http://technet2.microsoft.com/WindowsServer/en/library/1687ef1d-b382-49c7-b184-a4cc888be5251033.mspx?mfr=true
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
odomok07Commented:
It is always better to create a group and assign rights to that group.  Than it is to assign rights to users.

Create a share on the folders that you wish to share.  Create a group that can access that share.  Assign the rights that you wish to that group.  Add and remove users as they come and go to that group that you have created and assigned rights to.
0
Computer101Commented:
Forced accept.

Computer101
EE Admin
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
OS Security

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.