Solved

Tips on file server security

Posted on 2009-05-19
3
240 Views
Last Modified: 2013-12-02
Hi All,

One of my customers (150 users; all Windows 2003 servers) wants to create a new folder structure and security structure on it's fileserver. unfortunatly they want to have permissions on a top level folder, and different permissions on subfolders. Something like:

Folder (Permissions: Everyone full Control)
   - Subfolder 1 (Permissions: John: Full, Mary: Read, Steve: List content)
      - Subfolder 1-1 (Permissions: Steve: Full, John; read, Mary: Read)
etc etc. etc.

This of course will lead to a lot of headache. Untill now I havn't been able to convince them that this is not the right approach. I've been googling on some good documents on how one should setup permissions on a fileserver, But havn't been able to find a good one. Anyone here has a good link ?

Thanks,
Gerard
0
Comment
Question by:Jubal1234
3 Comments
 
LVL 16

Expert Comment

by:speshalyst
ID: 24421277
Unfortunately there is no one size fits all when it comes to setting up security..
it really depends on how ur org wants it set.
Best practices usually include create specific user groups and applying permissions to the groups.
Also avoid using 'DENY"
 
0
 
LVL 27

Accepted Solution

by:
bluntTony earned 125 total points
ID: 24421619
Agree - management rarely care what gives the IT dept headaches :0)

MS Best practices for applying permissions : http://technet.microsoft.com/en-us/library/cc779601(WS.10).aspx

This does mention applying permissions at the top level and using inheritance.
0
 
LVL 4

Author Comment

by:Jubal1234
ID: 24421780
Great ! This waas exactly what I needed. My headache has gotten better now :o) Thenk !
0

Featured Post

The Eight Noble Truths of Backup and Recovery

How can IT departments tackle the challenges of a Big Data world? This white paper provides a roadmap to success and helps companies ensure that all their data is safe and secure, no matter if it resides on-premise with physical or virtual machines or in the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Have you ever stumbled upon a software that is so great that you just love? It happened to me. Love at first sight. Filezilla Server.   Ok its not the most advanced ftp server I've came across. But its a fairly simple piece of software to get the …
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…

831 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question