• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 580
  • Last Modified:

How do we set up file folder & printer sharing Permissions for users & groups

How do we set up file folder & printer sharing Permissions for users & groups. Are there any microsoft videos, links to examples or best practices for this process. I have already fully installed the server with all updates. We also installed Exchange on this server as we are not going to have more than 10 users on the box. Please advise what is the best follow up for the server.
0
ruavol2
Asked:
ruavol2
  • 3
2 Solutions
 
clarktr2Commented:
That's a pretty broad question that it could take pages to explain.  I would recommend that you pick up a good book on the subject such as Microsoft Windows Server Unleashed.  If you can be more specific about exactly what you want to know, maybe I or someone else could explain...
0
 
tigermattCommented:

It's reasonably simple, to be honest. The main point you NEED to remember under all circumstances is to use Active Directory Security Groups as much as you can. When you assign permissions to a file or printer, you can add a Security Group's name rather than a user directly on the share, which pays off in the long run because you can give a different user the same permissions by merely adding them to a group, rather than tracking back through Active Directory what permissions are assigned how and where.

When you share a folder so that it can be accessed over the network, you are given the option to set permissions for the Share. Note: These are NOT the same as NTFS permissions (you access them on the 'Security' tab on a folder/file properties). Since Share permissions have very little scope security-wise, I'd suggest you just set the 'Everyone' group with Full Control (Owner) rights at the Share Security level, and then you can lock down what groups can access the folder and do what using the 'Security' tab.

You must also share a printer to have it accessible over the network. Share it from the 'Sharing' tab on its properties. However a printer does not have share permissions, so you can assign the permissions on the 'Security' tab to groups with the ability to print, manage print queues, delete print jobs and so on.

-tigermatt
0
 
ruavol2Tableau Trainer & Consultant Sales Exec.Author Commented:
Are there any examples or videos of how to create a user, or group
assign permissions to see a file or folder
verify the user cannot access a file or folder?
That is all I need for now.
0
 
tigermattCommented:

Creating Groups in Active Directory is easy - just open the AD Users and Computers console, locate an OU in the system and then right-click, New, User for a user account, group for a group account. Choose 'Security' if you choose a Group object. See the links above for details on setting NTFS security.

Easiest way to verify a user cannot access a file / folder is to press the 'Advanced' button the security tab, then go to Effective Permissions and enter the username. Unchecked boxes means the user does not have that permission inherited.

-tigermatt
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now