• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 504
  • Last Modified:

Permission on folders Windows 2012

Good Morning,

We have a product called Past Perfect. It is a museum tracking software for a University setting. We have four departments (four folders housed on a file server Windows 2012) and want them to have full control only over THEIR own folders. The are even given 20GB partitions to even separate them more.

example (folders)  : D: PP5_MuseumStudies
                                  E: PP5_Fashion
                                  F: PP5_LibraryArchives
                                 G: PP_FineArts


We also have security groups for these department and folders
PastPerfect_MuseumStudies_users
PastPerfect_Fashion_users
PastPerfect_FineArts_users
PastPerfect_LibraryArchives_users


I thought that it would be simple as giving Full Control to each group in each folder and removing Everyone out of the folders permissions. Yet some how it still gives access to my non priv account in MuseumStudies_users to a different department folder (ie. PP5_Fashion)

I don't even have the security groups in local admins BSCPP01\Administrators ... just have them in Remote DeskTop Users.


Would anyone have any ideas of a direction to go at this point? Any Help is appreciated in advance. Thanks
0
BuffStateIT
Asked:
BuffStateIT
  • 4
  • 2
1 Solution
 
Lionel MMSmall Business IT ConsultantCommented:
This is not an easy question to answer because there are so many variables. The easiest way (for me anyway) is to create group and assign users to those groups. Just remember that security rights are cumulative--if a user belongs to more than one group they will have the rights you give both group BUT denial rights take precedence so be careful with you start denying access. OK so once you have 1) assigned users to groups  2) go to their folders and remove all rights, including inherited permissions and add only that group to the folder, and 3) make sure you make that group the owner of that folder too (replace current owner). 4) click the replace owner on sub folders and files. Once done check a file in the lowest sub folder and see if it has the proper permissions. See picture. If you need more help on how I can make a quick video for you just let me know if this approach will work or not.
Folders-and-Groups.jpg
0
 
Meir RivkinFull stack Software EngineerCommented:
you should increase points to this question, is nothing close to be classified as easy question.
0
 
BuffStateITAuthor Commented:
How do I modify the points increase? is there a modification section for it ?
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

 
BuffStateITAuthor Commented:
How do I modify the points increase? is there a modification section for it ?
0
 
BuffStateITAuthor Commented:
A small video would be helpful. I have increased the points in the question also. Thanks.
0
 
Lionel MMSmall Business IT ConsultantCommented:
Hope this helps--if not let me know what you want more detail on
http://www.youtube.com/watch?v=1wEgI9YQh-4
0
 
BuffStateITAuthor Commented:
Fantastic. Thank you so much for the time you put into that youtube.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Get expert help—faster!

Need expert help—fast? Use the Help Bell for personalized assistance getting answers to your important questions.

  • 4
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now