Solved

NTFS Volume Permissions

Posted on 2013-01-17
3
320 Views
Last Modified: 2013-01-17
So I have a goofy question. I've always refrained from granting permissions at the volume level for any of my end users. I usually create a top level folder on the volume and create the share and set share and NTFS permissions there (big fan of ABE as well as I come from a Novell background).

I was asked today why not set the permissions at the volume/root level? I have a voice inside my head saying it's a bad idea, but I can't think of any technical reasons why you couldn't do it? Specifically, I can't think of a technical reason why I wouldn't create a share there?

Here's what I've always done:

Volume = D:
Folder = D:\Apps

I would set the share and NTFS permissions at the Folder (Apps) level.

Here's what I'm being asked about:

Volume = D:

Asked why I don't just share out "D:" as "Apps" and set share and NTFS permissions there.

Any best practice on this or does it "just depend".

Thanks,
Timmr72
0
Comment
Question by:timmr72
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 11

Assisted Solution

by:BillBondo
BillBondo earned 125 total points
ID: 38788192
If you create additional folders on d: you would be granting those rights as well to that folder. So do it at the folder level is best
0
 
LVL 13

Accepted Solution

by:
imkottees earned 125 total points
ID: 38788208
Hi,

you can give it to Volume level.

Lets say you want to give read/write permission to userA for D:\Apps.  to achieve this you can also give read/write permission to volume level (D:\ drive) which also inherit to Apps folder.

But here userA also have the read/write permission for other folders in the D:\ drive. In case if userA dont want to access other folders on D drive, then you should manually deny the permission.

You can go with whatever suits you :)
0
 

Author Closing Comment

by:timmr72
ID: 38789381
Thank  you both. Splitting the points.
0

Featured Post

Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

We recently had an issue where out of nowhere, end users started indicating that their logins to our terminal server were just showing a "blank screen." After checking the usual suspects -- profiles, shell=explorer.exe in the registry, userinit.exe,…
New Windows 7 Installations take days for Windows-Updates to show up and install. This can easily be fixed. I have finally decided to write an article because this seems to get asked several times a day lately. This Article and the Links apply to…
This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…

735 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question