• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 210
  • Last Modified:

Folder Permissions Server 2008

I am having trouble with my primary domain controller. No matter how I set the sharing permissions and security permissions users can't use the folders. I have switched to sharing folders on the secondary DC and everything is fine. I am on Server 2008 32bit and I think I will move to R2 early. My question is two pronged.1 Is there an easy way to reset the permissions on Server 2008? 2 What is the best/easiest way to upgrade/migrate to 2008 64bit R2?
0
mtdynamic
Asked:
mtdynamic
1 Solution
 
ThethicalCommented:
1. you can change the inheritance from C drive and then reassign the permissions, but I think it won't be a good idea. Did you check share and NTFS permissions? Like on share put everyone and then change the NTFS permission.
2. You cannot update from a 32bit to 64bit, you'll have to migrate or just start from scratch.
0
 
Neil RussellTechnical Development LeadCommented:
First off, shaing anything oc a DC is a security risk. Your DC should be the most secure device on your network!
0
 
Felicia KingCommented:
If you are going to share on any server, not just a domain controller, the data that is being shared should be on a drive letter other than the OS drive letter. I generally create a top level folder called D:\Data and then setup subfolders under that with unique NTFS permissions for each folder under D:\Data. D:\Data is shared as Data$ with local users group modify perms and administrators full.
D:\Data NTFS perms itself should appear as administrator full, system full, and local users group LIST. Only the subfolders of D:\Data should have permissions for unique resource groups that allow users modify access.
When you can use the local users group and the local administrators group, you should. The domain groups are a member of these groups. If you were to use only domain admins or only domain users, then you are denying access to local accounts in the event the server is a member server. Obviously, these groups are unavailable on a domain controller.

I would NEVER share any folder on the C: drive, the OS drive, for any user to have write access to.
0

Featured Post

What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now