Solved

single user to adminster ONE folder.

Posted on 2013-01-28
5
173 Views
Last Modified: 2013-02-12
I would like to take a normal Domain user and put them in charge of giving rights to sub folders, assiging security groups to JUST one folder and all its sub folders.

This person would only be able to administer just this one folder and subs.  YET not have the rights to changes any other folder where the initial folder is located.

In other words give full admin rights  to just one person for that particular folder.  So that the person can manage that area.

I was wondering if there was a way that I could do this in AD, or is my only option is to make this domain user the
0
Comment
Question by:lberthiaume
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
5 Comments
 
LVL 16

Expert Comment

by:choward16980
ID: 38828260
Right click the folder and go to properties.

go to security tab

click advanced

click change permissions

uncheck include inheritable permissions form this objects' parents (This deletes all the prior inherited permissions and allows you to make it exclusive)

You will be prompted to copy or remove.

click remove

add your user and assign them full permission.

From there, anything created inside will inherit strictly him or her as admin
0
 

Author Comment

by:lberthiaume
ID: 38828275
I have tried all that,
What about adding security groups, other users and adding permissions to other sub folders in that directory?
0
 
LVL 16

Expert Comment

by:choward16980
ID: 38829170
You would just uncheck the "inheritable permissions form this objects' parents" box on the sub folders and add the security groups and or users you're trying to add.  This works, I've done it a billion times.
0
 

Author Comment

by:lberthiaume
ID: 38830849
I think I may not be explaining myself, I want the USER to manage the the file security structure and sub folders Just for that one folder.  
As domain admin i can add and   remove permissions at will. Not and issue.  

Mydelema is that short of Sharepoint, I would like a normal user to be an adminsitrator of  ONE folder and all its sub folders. Meaning the user would be able to add and remove permissions and security groups to and from that structure.
0
 
LVL 16

Accepted Solution

by:
choward16980 earned 500 total points
ID: 38831845
Giving that "USER" full permission to that folder as I described does exactly just that.  A step down from that folder, user would have whatever permissions they normally do, step up into that directory and they would essentially be admin of that directory and any other directory created underneath it via parent propagation.

The apply to "This folder, subfolder and files".

Before that screen, you need to uncheck the inherit option and tell it to remove.  That will wipe out all the permissions and you can scrutinize from there.
user.png
0

Featured Post

MIM Survival Guide for Service Desk Managers

Major incidents can send mastered service desk processes into disorder. Systems and tools produce the data needed to resolve these incidents, but your challenge is getting that information to the right people fast. Check out the Survival Guide and begin bringing order to chaos.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Have you ever had a hard drive that you can't boot into, but need to change the registry? Here is the solution! This article guides you through accessing and editing a registry of a non-primary drive. To read registry information on a non-prim…
Ever notice how you can't use a new drive in Windows without having Windows assigning a Disk Signature?  Ever have a signature collision problem (especially with Virtual Machines?)  This article is intended to help you understand what's going on and…
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

710 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question