[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 500
  • Last Modified:

Permission on folders Windows 2012

Good Morning,

We have a product called Past Perfect. It is a museum tracking software for a University setting. We have four departments (four folders housed on a file server Windows 2012) and want them to have full control only over THEIR own folders. The are even given 20GB partitions to even separate them more.

example (folders)  : D: PP5_MuseumStudies
                                  E: PP5_Fashion
                                  F: PP5_LibraryArchives
                                 G: PP_FineArts


We also have security groups for these department and folders
PastPerfect_MuseumStudies_users
PastPerfect_Fashion_users
PastPerfect_FineArts_users
PastPerfect_LibraryArchives_users


I thought that it would be simple as giving Full Control to each group in each folder and removing Everyone out of the folders permissions. Yet some how it still gives access to my non priv account in MuseumStudies_users to a different department folder (ie. PP5_Fashion)

I don't even have the security groups in local admins BSCPP01\Administrators ... just have them in Remote DeskTop Users.


Would anyone have any ideas of a direction to go at this point? Any Help is appreciated in advance. Thanks
0
BuffStateIT
Asked:
BuffStateIT
  • 4
  • 2
1 Solution
 
Lionel MMSmall Business IT ConsultantCommented:
This is not an easy question to answer because there are so many variables. The easiest way (for me anyway) is to create group and assign users to those groups. Just remember that security rights are cumulative--if a user belongs to more than one group they will have the rights you give both group BUT denial rights take precedence so be careful with you start denying access. OK so once you have 1) assigned users to groups  2) go to their folders and remove all rights, including inherited permissions and add only that group to the folder, and 3) make sure you make that group the owner of that folder too (replace current owner). 4) click the replace owner on sub folders and files. Once done check a file in the lowest sub folder and see if it has the proper permissions. See picture. If you need more help on how I can make a quick video for you just let me know if this approach will work or not.
Folders-and-Groups.jpg
0
 
Meir RivkinFull stack Software EngineerCommented:
you should increase points to this question, is nothing close to be classified as easy question.
0
 
BuffStateITAuthor Commented:
How do I modify the points increase? is there a modification section for it ?
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
BuffStateITAuthor Commented:
How do I modify the points increase? is there a modification section for it ?
0
 
BuffStateITAuthor Commented:
A small video would be helpful. I have increased the points in the question also. Thanks.
0
 
Lionel MMSmall Business IT ConsultantCommented:
Hope this helps--if not let me know what you want more detail on
http://www.youtube.com/watch?v=1wEgI9YQh-4
0
 
BuffStateITAuthor Commented:
Fantastic. Thank you so much for the time you put into that youtube.
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

  • 4
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now