Folder Permissions Server 2008

Posted on 2011-10-27
Last Modified: 2012-06-21
I am having trouble with my primary domain controller. No matter how I set the sharing permissions and security permissions users can't use the folders. I have switched to sharing folders on the secondary DC and everything is fine. I am on Server 2008 32bit and I think I will move to R2 early. My question is two pronged.1 Is there an easy way to reset the permissions on Server 2008? 2 What is the best/easiest way to upgrade/migrate to 2008 64bit R2?
Question by:mtdynamic
    LVL 8

    Expert Comment

    1. you can change the inheritance from C drive and then reassign the permissions, but I think it won't be a good idea. Did you check share and NTFS permissions? Like on share put everyone and then change the NTFS permission.
    2. You cannot update from a 32bit to 64bit, you'll have to migrate or just start from scratch.
    LVL 37

    Expert Comment

    First off, shaing anything oc a DC is a security risk. Your DC should be the most secure device on your network!
    LVL 4

    Accepted Solution

    If you are going to share on any server, not just a domain controller, the data that is being shared should be on a drive letter other than the OS drive letter. I generally create a top level folder called D:\Data and then setup subfolders under that with unique NTFS permissions for each folder under D:\Data. D:\Data is shared as Data$ with local users group modify perms and administrators full.
    D:\Data NTFS perms itself should appear as administrator full, system full, and local users group LIST. Only the subfolders of D:\Data should have permissions for unique resource groups that allow users modify access.
    When you can use the local users group and the local administrators group, you should. The domain groups are a member of these groups. If you were to use only domain admins or only domain users, then you are denying access to local accounts in the event the server is a member server. Obviously, these groups are unavailable on a domain controller.

    I would NEVER share any folder on the C: drive, the OS drive, for any user to have write access to.

    Featured Post

    What Is Threat Intelligence?

    Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

    Join & Write a Comment

    New Windows 7 Installations take days for Windows-Updates to show up and install. This can easily be fixed. I have finally decided to write an article because this seems to get asked several times a day lately. This Article and the Links apply to…
    The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
    To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
    This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…

    754 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    17 Experts available now in Live!

    Get 1:1 Help Now