Solved

single user to adminster ONE folder.

Posted on 2013-01-28
5
167 Views
Last Modified: 2013-02-12
I would like to take a normal Domain user and put them in charge of giving rights to sub folders, assiging security groups to JUST one folder and all its sub folders.

This person would only be able to administer just this one folder and subs.  YET not have the rights to changes any other folder where the initial folder is located.

In other words give full admin rights  to just one person for that particular folder.  So that the person can manage that area.

I was wondering if there was a way that I could do this in AD, or is my only option is to make this domain user the
0
Comment
Question by:lberthiaume
  • 3
  • 2
5 Comments
 
LVL 16

Expert Comment

by:choward16980
ID: 38828260
Right click the folder and go to properties.

go to security tab

click advanced

click change permissions

uncheck include inheritable permissions form this objects' parents (This deletes all the prior inherited permissions and allows you to make it exclusive)

You will be prompted to copy or remove.

click remove

add your user and assign them full permission.

From there, anything created inside will inherit strictly him or her as admin
0
 

Author Comment

by:lberthiaume
ID: 38828275
I have tried all that,
What about adding security groups, other users and adding permissions to other sub folders in that directory?
0
 
LVL 16

Expert Comment

by:choward16980
ID: 38829170
You would just uncheck the "inheritable permissions form this objects' parents" box on the sub folders and add the security groups and or users you're trying to add.  This works, I've done it a billion times.
0
 

Author Comment

by:lberthiaume
ID: 38830849
I think I may not be explaining myself, I want the USER to manage the the file security structure and sub folders Just for that one folder.  
As domain admin i can add and   remove permissions at will. Not and issue.  

Mydelema is that short of Sharepoint, I would like a normal user to be an adminsitrator of  ONE folder and all its sub folders. Meaning the user would be able to add and remove permissions and security groups to and from that structure.
0
 
LVL 16

Accepted Solution

by:
choward16980 earned 500 total points
ID: 38831845
Giving that "USER" full permission to that folder as I described does exactly just that.  A step down from that folder, user would have whatever permissions they normally do, step up into that directory and they would essentially be admin of that directory and any other directory created underneath it via parent propagation.

The apply to "This folder, subfolder and files".

Before that screen, you need to uncheck the inherit option and tell it to remove.  That will wipe out all the permissions and you can scrutinize from there.
user.png
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Accidental Data Delete 6 33
Outgoing Exchange 2003 Domain Issue 3 12
Server 2011 SBS - Operating System Reload / Active Directory Question 5 50
Hibernate on windows 10 18 122
Ever notice how you can't use a new drive in Windows without having Windows assigning a Disk Signature?  Ever have a signature collision problem (especially with Virtual Machines?)  This article is intended to help you understand what's going on and…
When you upgrade from Windows 8 to 8.1 or to Windows 10 or if you are like me you are on the Insider Program you may find yourself with many 450MB recovery partitions.  With a traditional disk that may not be a problem but with relatively smaller SS…
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …

864 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

24 Experts available now in Live!

Get 1:1 Help Now