Solved

Tips on file server security

Posted on 2009-05-19
3
235 Views
Last Modified: 2013-12-02
Hi All,

One of my customers (150 users; all Windows 2003 servers) wants to create a new folder structure and security structure on it's fileserver. unfortunatly they want to have permissions on a top level folder, and different permissions on subfolders. Something like:

Folder (Permissions: Everyone full Control)
   - Subfolder 1 (Permissions: John: Full, Mary: Read, Steve: List content)
      - Subfolder 1-1 (Permissions: Steve: Full, John; read, Mary: Read)
etc etc. etc.

This of course will lead to a lot of headache. Untill now I havn't been able to convince them that this is not the right approach. I've been googling on some good documents on how one should setup permissions on a fileserver, But havn't been able to find a good one. Anyone here has a good link ?

Thanks,
Gerard
0
Comment
Question by:Jubal1234
3 Comments
 
LVL 16

Expert Comment

by:speshalyst
ID: 24421277
Unfortunately there is no one size fits all when it comes to setting up security..
it really depends on how ur org wants it set.
Best practices usually include create specific user groups and applying permissions to the groups.
Also avoid using 'DENY"
 
0
 
LVL 27

Accepted Solution

by:
bluntTony earned 125 total points
ID: 24421619
Agree - management rarely care what gives the IT dept headaches :0)

MS Best practices for applying permissions : http://technet.microsoft.com/en-us/library/cc779601(WS.10).aspx

This does mention applying permissions at the top level and using inheritance.
0
 
LVL 4

Author Comment

by:Jubal1234
ID: 24421780
Great ! This waas exactly what I needed. My headache has gotten better now :o) Thenk !
0

Featured Post

Why do Marketing keep bothering you?

Is your marketing department constantly asking for new email signature updates? Are they requesting a different design for every department? Do they need yet another banner added? Don’t let it get you down! There is an easy way to manage all of these requests...

Join & Write a Comment

Many of us need to configure DHCP server(s) in their environment. We can do that simply via DHCP console on server or using MMC snap-in on each computer with Administrative Tools installed in a network. But what if we have to configure many DHCP ser…
If, like me, you have a lot of Dell servers in the estate you manage this article should save you a little time. When attempting to login to iDrac on any server I would be presented with two errors. The first reads "Do you want to run this applicati…
It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now