troubleshooting Question

Sanity check on securing NTFS root folder from accidental moves & deletes

Avatar of javajo
javajoFlag for United States of America asked on
Microsoft Legacy OSActive Directory
9 Comments1 Solution575 ViewsLast Modified:
Good afternoon all:

Running Windows 2003 AD with NTFS file shares

He have a primary DFS file share called "A"
We have about 25 subfolders underneath that get accidentally moved all the time

Would like to put an end to this (and take a hammer to the people not paying attention when using their mouse)


Steps i've taken:
On each of the 25 sub folders i've turned off "inherit permissions from parent" and assigned individual NTFS permissions to each of the 25 folders typically involving modify access for all required users.  I want the users to be able to create, modify folders and documents within the sub folders.  I really don't care if they accidentally move stuff in these sub folders.

The "root" share or "A" is set to full control to all domain users.

Currently users are able to move the 25 sub folders into other sub folders in the root:
So if root is A:
and I have sub folder B
and I have sub folder C

Assuming domain users have full access to both B & C - users can move folder B into folder C.

Here's my question - proposed solution.

At the root share (A) - I limit domain users to Read and list folders.
Domain admins have full control.
That should prevent users from accidentally moving the sub folders.

Does this make sense?









ASKER CERTIFIED SOLUTION
Chris Dent
PowerShell Developer
Join our community to see this answer!
Unlock 1 Answer and 9 Comments.
Start Free Trial
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 9 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros