Solved

Correct method of applying rights to a file structure

Posted on 2010-08-31
3
271 Views
Last Modified: 2012-05-10
I just ran an installation of 2008 on a file server running 2000. It consists of a C: drive with all OS and program files and an F: drive that contains all the client and user folders.

I must have messed up somewhere assigning folder rights and want to start fresh.

the folders on the F: contain two sets of important folders.

One is the CLIENTS folder which everyone in the company should have full rights too.

#2 is the USERS folder which contains all the user's files. I want this folder to only allow the individual user to have access to his folder, except the two owners of the company should have access to all files on folders.

what is the correct configuration for doing this?

thanks in advance.
0
Comment
Question by:RSchierer
  • 2
3 Comments
 
LVL 5

Accepted Solution

by:
talkinsmak earned 500 total points
ID: 33570505
-One is the CLIENTS folder which everyone in the company should have full rights too.

Create a new group called "GRP-Share-Clients"
Make all your users members of that group
Go to the properties of the "CLIENTS" folder, click on the security tab, click advanced, click change permissions, click add.  Add the new group "GRP-Share-Clients"
In the permissions box click "Full Control" then unclick "Full Control" (Trust me, I'll explain in a minute)
Click OK until you get out of there.  YOu have now given your users rights to do anything they want in that folder except delete the parent folder.  You should never give a user full control of anything.
#2 is the USERS folder which contains all the user's files. I want this folder to only allow the individual user to have access to his folder, except the two owners of the company should have access to all files on folders.
 
You can apply the rights at each folder or find a script to help.
 
John
0
 
LVL 5

Assisted Solution

by:talkinsmak
talkinsmak earned 500 total points
ID: 33570517
- two owners of the company should have access to all files on folders
Create a new group Called "GRP-Share-All"
Put the owners into that group
Apply it to the top level of the Users folder like we did with the clients folder above.
0
 

Author Closing Comment

by:RSchierer
ID: 33570883
thank you for the fast and detailed expllanation.
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Synchronize a new Active Directory domain with an existing Office 365 tenant
Find out how to use Active Directory data for email signature management in Microsoft Exchange and Office 365.
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

895 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now