Solved

NTFS Volume Permissions

Posted on 2013-01-17
3
318 Views
Last Modified: 2013-01-17
So I have a goofy question. I've always refrained from granting permissions at the volume level for any of my end users. I usually create a top level folder on the volume and create the share and set share and NTFS permissions there (big fan of ABE as well as I come from a Novell background).

I was asked today why not set the permissions at the volume/root level? I have a voice inside my head saying it's a bad idea, but I can't think of any technical reasons why you couldn't do it? Specifically, I can't think of a technical reason why I wouldn't create a share there?

Here's what I've always done:

Volume = D:
Folder = D:\Apps

I would set the share and NTFS permissions at the Folder (Apps) level.

Here's what I'm being asked about:

Volume = D:

Asked why I don't just share out "D:" as "Apps" and set share and NTFS permissions there.

Any best practice on this or does it "just depend".

Thanks,
Timmr72
0
Comment
Question by:timmr72
3 Comments
 
LVL 11

Assisted Solution

by:BillBondo
BillBondo earned 125 total points
ID: 38788192
If you create additional folders on d: you would be granting those rights as well to that folder. So do it at the folder level is best
0
 
LVL 13

Accepted Solution

by:
imkottees earned 125 total points
ID: 38788208
Hi,

you can give it to Volume level.

Lets say you want to give read/write permission to userA for D:\Apps.  to achieve this you can also give read/write permission to volume level (D:\ drive) which also inherit to Apps folder.

But here userA also have the read/write permission for other folders in the D:\ drive. In case if userA dont want to access other folders on D drive, then you should manually deny the permission.

You can go with whatever suits you :)
0
 

Author Closing Comment

by:timmr72
ID: 38789381
Thank  you both. Splitting the points.
0

Featured Post

Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I have been working as System Administrators since 2003. I recently started working as a FreeLancer and was amazed to find out that very few people are taking full advantage of their Windows Server Machines. Microsoft Windows Server comes with so…
Redirected folders in a windows domain can be quite useful for a number of reasons, one of them being that with redirected application data, you can give users more seamless experience when logging into different workstations.  For example, if a use…
This tutorial will walk an individual through locating and launching the BEUtility application and how to execute it on the appropriate database. Log onto the server running the Backup Exec database. In a larger environment, this would generally be …
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question