Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 281
  • Last Modified:

Server 2008 - Enforcing read only on folders

In our second level school we have a Server 2008 with Active Directory where students are organised into 6 organisational units based on year of enrollment. They have access, in My Computer,  to their home folder and also to an Assignments folder. Teachers also have access to the Assignments folder. I want to ensure students have read only access to the Assignments while Teachers have read/write/create.
At the moment students can delete folder/files which is a pain.
0
jimcallan
Asked:
jimcallan
  • 5
  • 3
  • 2
2 Solutions
 
GanparCommented:
"At the moment students can delete folder/files which is a pain." For which folder you want this please elaborate
0
 
OribaCommented:
Try using "deny" instead of "grant"
0
 
jimcallanAuthor Commented:
Folowing on from Orbis post above I have just realised that students are members of the administrators group so I have denied that group all except Read. I will check tomorrow and see if that works.
0
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
jimcallanAuthor Commented:
Nope - that did not work
0
 
GanparCommented:
Have you tried

Security -> select administrator group -> advanced -> permissions tab-> select-> administrators -> edit -> clear all then select on deny

Better if u create one group for students and give read only permissions
0
 
OribaCommented:
If students are members of more than one group than they will have permissions as the group with the most granted permission unless they have deny...

They have deny on write but still can write ?!
0
 
jimcallanAuthor Commented:
If I drag and drop all student org units into a security group can I then deny write access to the sec group - would that work?
0
 
jimcallanAuthor Commented:
If I drap and drop all student org units into a security group and then deny write to the security grp - would that work?
0
 
jimcallanAuthor Commented:
If I drap & drop all student org units into a security group and deny write to the sec grp would that work?
0
 
GanparCommented:
You must add all student object into security group. Well deny takes precedence on allow so it will work.
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

  • 5
  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now