Solved

NTFS Volume Permissions

Posted on 2013-01-17
3
315 Views
Last Modified: 2013-01-17
So I have a goofy question. I've always refrained from granting permissions at the volume level for any of my end users. I usually create a top level folder on the volume and create the share and set share and NTFS permissions there (big fan of ABE as well as I come from a Novell background).

I was asked today why not set the permissions at the volume/root level? I have a voice inside my head saying it's a bad idea, but I can't think of any technical reasons why you couldn't do it? Specifically, I can't think of a technical reason why I wouldn't create a share there?

Here's what I've always done:

Volume = D:
Folder = D:\Apps

I would set the share and NTFS permissions at the Folder (Apps) level.

Here's what I'm being asked about:

Volume = D:

Asked why I don't just share out "D:" as "Apps" and set share and NTFS permissions there.

Any best practice on this or does it "just depend".

Thanks,
Timmr72
0
Comment
Question by:timmr72
3 Comments
 
LVL 11

Assisted Solution

by:BillBondo
BillBondo earned 125 total points
ID: 38788192
If you create additional folders on d: you would be granting those rights as well to that folder. So do it at the folder level is best
0
 
LVL 13

Accepted Solution

by:
imkottees earned 125 total points
ID: 38788208
Hi,

you can give it to Volume level.

Lets say you want to give read/write permission to userA for D:\Apps.  to achieve this you can also give read/write permission to volume level (D:\ drive) which also inherit to Apps folder.

But here userA also have the read/write permission for other folders in the D:\ drive. In case if userA dont want to access other folders on D drive, then you should manually deny the permission.

You can go with whatever suits you :)
0
 

Author Closing Comment

by:timmr72
ID: 38789381
Thank  you both. Splitting the points.
0

Featured Post

Too many email signature updates to deal with?

Do you feel like you are taking up all of your time constantly visiting users’ desks to make changes to email signatures? Wish you could manage all signatures from one central location, easily design them and deploy them quickly to users? Well, there is an easy way!

Join & Write a Comment

We recently had an issue where out of nowhere, end users started indicating that their logins to our terminal server were just showing a "blank screen." After checking the usual suspects -- profiles, shell=explorer.exe in the registry, userinit.exe,…
I had a question today where the user wanted to know how to delete an SSL Certificate, so I thought that I would quickly add this How to! Article for your reference. WHY WOULD YOU WANT TO DELETE A CERTIFICATE? 1. If an incorrect certificate was …
This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now