How do we set up file folder & printer sharing Permissions for users & groups

How do we set up file folder & printer sharing Permissions for users & groups. Are there any microsoft videos, links to examples or best practices for this process. I have already fully installed the server with all updates. We also installed Exchange on this server as we are not going to have more than 10 users on the box. Please advise what is the best follow up for the server.
RUA Volunteer2?Tableau Trainer & Consultant Sales Exec.Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

That's a pretty broad question that it could take pages to explain.  I would recommend that you pick up a good book on the subject such as Microsoft Windows Server Unleashed.  If you can be more specific about exactly what you want to know, maybe I or someone else could explain...

It's reasonably simple, to be honest. The main point you NEED to remember under all circumstances is to use Active Directory Security Groups as much as you can. When you assign permissions to a file or printer, you can add a Security Group's name rather than a user directly on the share, which pays off in the long run because you can give a different user the same permissions by merely adding them to a group, rather than tracking back through Active Directory what permissions are assigned how and where.

When you share a folder so that it can be accessed over the network, you are given the option to set permissions for the Share. Note: These are NOT the same as NTFS permissions (you access them on the 'Security' tab on a folder/file properties). Since Share permissions have very little scope security-wise, I'd suggest you just set the 'Everyone' group with Full Control (Owner) rights at the Share Security level, and then you can lock down what groups can access the folder and do what using the 'Security' tab.

You must also share a printer to have it accessible over the network. Share it from the 'Sharing' tab on its properties. However a printer does not have share permissions, so you can assign the permissions on the 'Security' tab to groups with the ability to print, manage print queues, delete print jobs and so on.


Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
RUA Volunteer2?Tableau Trainer & Consultant Sales Exec.Author Commented:
Are there any examples or videos of how to create a user, or group
assign permissions to see a file or folder
verify the user cannot access a file or folder?
That is all I need for now.

Creating Groups in Active Directory is easy - just open the AD Users and Computers console, locate an OU in the system and then right-click, New, User for a user account, group for a group account. Choose 'Security' if you choose a Group object. See the links above for details on setting NTFS security.

Easiest way to verify a user cannot access a file / folder is to press the 'Advanced' button the security tab, then go to Effective Permissions and enter the username. Unchecked boxes means the user does not have that permission inherited.

It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.