Solved

Correct method of applying rights to a file structure

Posted on 2010-08-31
3
272 Views
Last Modified: 2012-05-10
I just ran an installation of 2008 on a file server running 2000. It consists of a C: drive with all OS and program files and an F: drive that contains all the client and user folders.

I must have messed up somewhere assigning folder rights and want to start fresh.

the folders on the F: contain two sets of important folders.

One is the CLIENTS folder which everyone in the company should have full rights too.

#2 is the USERS folder which contains all the user's files. I want this folder to only allow the individual user to have access to his folder, except the two owners of the company should have access to all files on folders.

what is the correct configuration for doing this?

thanks in advance.
0
Comment
Question by:RSchierer
  • 2
3 Comments
 
LVL 5

Accepted Solution

by:
talkinsmak earned 500 total points
ID: 33570505
-One is the CLIENTS folder which everyone in the company should have full rights too.

Create a new group called "GRP-Share-Clients"
Make all your users members of that group
Go to the properties of the "CLIENTS" folder, click on the security tab, click advanced, click change permissions, click add.  Add the new group "GRP-Share-Clients"
In the permissions box click "Full Control" then unclick "Full Control" (Trust me, I'll explain in a minute)
Click OK until you get out of there.  YOu have now given your users rights to do anything they want in that folder except delete the parent folder.  You should never give a user full control of anything.
#2 is the USERS folder which contains all the user's files. I want this folder to only allow the individual user to have access to his folder, except the two owners of the company should have access to all files on folders.
 
You can apply the rights at each folder or find a script to help.
 
John
0
 
LVL 5

Assisted Solution

by:talkinsmak
talkinsmak earned 500 total points
ID: 33570517
- two owners of the company should have access to all files on folders
Create a new group Called "GRP-Share-All"
Put the owners into that group
Apply it to the top level of the Users folder like we did with the clients folder above.
0
 

Author Closing Comment

by:RSchierer
ID: 33570883
thank you for the fast and detailed expllanation.
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Find out how to use Active Directory data for email signature management in Microsoft Exchange and Office 365.
This article outlines the process to identify and resolve account lockout in an Active Directory environment.
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question