Permission to share folder

Posted on 2013-10-08
Medium Priority
Last Modified: 2013-10-14
I have created a privileged user on a Windows 2008 R2 (DC).
I don't want him to be a member of "Server operators", but I want to allow him to create file shares on the server. By default this is not allowed.
Does anyone know how to do this?
In registry I have tried to give him full permission to ./lanmanserver, but it doesn't work,

Question by:MJOMJO
LVL 26

Expert Comment

by:Lionel MM
ID: 39558801
This is not a perfect solution but it will work--you can make him a member of the server operators but limit him to logon to only one server in his user setup in Domain Users and Computers.

Author Comment

ID: 39558915
Unfortunately, this is not a solution.
I wonder why this is so difficult?
LVL 24

Expert Comment

ID: 39560550
This cannot be performed with adding the user to admin group.You can do one think over here create share folder and assign the ownership of folder  to user and assign full control to user on root share folder.Now user can create sub folders in share and assign security permission but s/he cannot share the folder.

Also it is not recommend to have file server role on DC it should be on member server.
LVL 27

Accepted Solution

Steve earned 1500 total points
ID: 39571144
I wonder why this is so difficult?
It's not. It's just that your requirements are very specific and may not be something that was considered worthwhile providing a function.

As the permissions for messing wit the filesystem (shares/file security etc) is quite critical to the running of the server, it is assumed that a person with access to mess with shares/security would also be allowed some authority over the server itself.

In general, a server hosting shares wouldn't also be a DC, so you could provide 'server operators' permission without exposing the entire network.

Author Comment

ID: 39571181
I know, running file shares on a DC is not best way to do it, but this is in Vest Africa and the resources are limited.
Anyway, I got an explanation and I'll see if it's possible to install an extra server (DC).
Thanks to everybody.


Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Understanding the various editions available is vital when you decide to purchase Windows Server 2012. You need to have a basic understanding of the features and limitations in each edition in order to make a well-informed decision that best suits …
In current releases of Windows 10, MS removed the ability to format a volume with ReFS. That feature is moved to Windows 10 Pro for Workstations. The requisite files exist in Pro, but functionality is locked and/or otherwise unavailable. A $125 upgr…
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…
Finding and deleting duplicate (picture) files can be a time consuming task. My wife and I, our three kids and their families all share one dilemma: Managing our pictures. Between desktops, laptops, phones, tablets, and cameras; over the last decade…

624 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question