How do we set up file folder & printer sharing Permissions for users & groups

Posted on 2008-11-13
Last Modified: 2012-05-05
How do we set up file folder & printer sharing Permissions for users & groups. Are there any microsoft videos, links to examples or best practices for this process. I have already fully installed the server with all updates. We also installed Exchange on this server as we are not going to have more than 10 users on the box. Please advise what is the best follow up for the server.
Question by:ruavol2
    LVL 3

    Expert Comment

    That's a pretty broad question that it could take pages to explain.  I would recommend that you pick up a good book on the subject such as Microsoft Windows Server Unleashed.  If you can be more specific about exactly what you want to know, maybe I or someone else could explain...
    LVL 58

    Accepted Solution


    It's reasonably simple, to be honest. The main point you NEED to remember under all circumstances is to use Active Directory Security Groups as much as you can. When you assign permissions to a file or printer, you can add a Security Group's name rather than a user directly on the share, which pays off in the long run because you can give a different user the same permissions by merely adding them to a group, rather than tracking back through Active Directory what permissions are assigned how and where.

    When you share a folder so that it can be accessed over the network, you are given the option to set permissions for the Share. Note: These are NOT the same as NTFS permissions (you access them on the 'Security' tab on a folder/file properties). Since Share permissions have very little scope security-wise, I'd suggest you just set the 'Everyone' group with Full Control (Owner) rights at the Share Security level, and then you can lock down what groups can access the folder and do what using the 'Security' tab.

    You must also share a printer to have it accessible over the network. Share it from the 'Sharing' tab on its properties. However a printer does not have share permissions, so you can assign the permissions on the 'Security' tab to groups with the ability to print, manage print queues, delete print jobs and so on.

    LVL 58

    Assisted Solution


    Author Comment

    Are there any examples or videos of how to create a user, or group
    assign permissions to see a file or folder
    verify the user cannot access a file or folder?
    That is all I need for now.
    LVL 58

    Expert Comment


    Creating Groups in Active Directory is easy - just open the AD Users and Computers console, locate an OU in the system and then right-click, New, User for a user account, group for a group account. Choose 'Security' if you choose a Group object. See the links above for details on setting NTFS security.

    Easiest way to verify a user cannot access a file / folder is to press the 'Advanced' button the security tab, then go to Effective Permissions and enter the username. Unchecked boxes means the user does not have that permission inherited.


    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    IT, Stop Being Called Into Every Meeting

    Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

    When I went to try to install Office 2007 and Office 2010 ADMX Group Policy administrative templates on my new Windows Server 2008 R2, I couldn't find any straightforward guidance on how to do it.  I muddled my way through it, but I thought I'd shar…
    I was supporting a handful of Windows 2008 (non-R2) 2 node clusters with shared quorum disks. Some had SQL 2008 installed and some were just a vendor application that we supported. For the purposes of this article it doesn’t really matter which so w…
    This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
    This tutorial will show how to inventory, catalog, and restore media from legacy versions of Backup Exec into both 2012 and 2014 versions of the software. Select Storage from the tabs along the ribbon bar as the top: Ensure the proper storage devi…

    779 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    10 Experts available now in Live!

    Get 1:1 Help Now