Solved

Tips on file server security

Posted on 2009-05-19
3
242 Views
Last Modified: 2013-12-02
Hi All,

One of my customers (150 users; all Windows 2003 servers) wants to create a new folder structure and security structure on it's fileserver. unfortunatly they want to have permissions on a top level folder, and different permissions on subfolders. Something like:

Folder (Permissions: Everyone full Control)
   - Subfolder 1 (Permissions: John: Full, Mary: Read, Steve: List content)
      - Subfolder 1-1 (Permissions: Steve: Full, John; read, Mary: Read)
etc etc. etc.

This of course will lead to a lot of headache. Untill now I havn't been able to convince them that this is not the right approach. I've been googling on some good documents on how one should setup permissions on a fileserver, But havn't been able to find a good one. Anyone here has a good link ?

Thanks,
Gerard
0
Comment
Question by:Jubal1234
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 16

Expert Comment

by:speshalyst
ID: 24421277
Unfortunately there is no one size fits all when it comes to setting up security..
it really depends on how ur org wants it set.
Best practices usually include create specific user groups and applying permissions to the groups.
Also avoid using 'DENY"
 
0
 
LVL 27

Accepted Solution

by:
bluntTony earned 125 total points
ID: 24421619
Agree - management rarely care what gives the IT dept headaches :0)

MS Best practices for applying permissions : http://technet.microsoft.com/en-us/library/cc779601(WS.10).aspx

This does mention applying permissions at the top level and using inheritance.
0
 
LVL 4

Author Comment

by:Jubal1234
ID: 24421780
Great ! This waas exactly what I needed. My headache has gotten better now :o) Thenk !
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Auslogics BoostSpeed 9 software 5 90
Unknown AD user under VMWare OU 4 72
DNS/WINS in a domain 10 48
robocopy fails- error 53 - network path not found 5 30
Many of us need to configure DHCP server(s) in their environment. We can do that simply via DHCP console on server or using MMC snap-in on each computer with Administrative Tools installed in a network. But what if we have to configure many DHCP ser…
I've always wanted to allow a user to have a printer no matter where they login. The steps below will show you how to achieve just that. In this Article I'll show how to deploy printers automatically with group policy and then using security fil…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question