Solved

NTFS Folder Permissions

Posted on 2014-02-24
3
447 Views
Last Modified: 2014-02-26
Had a request from a user to have the global downloads folder turned into a secure zone.

Basically need it so everyone can save to it, open their own files, but cannot view anyone elses files.

I have the following permissions in place.

Creator Owner - Full Control
Domain users - Write + List folder contents

The users don't want each other to be able to see the list folder contents but if I remove this it comes up access denied for the entire folder.

The only workaround I have thought of is to create a folder per user within downloads and tie it down so each person has their own folder which only they can view and save into.

But this has been met with "Why do I have to do this, I don't currently choose where I save my downloads will I have to manually move them into my folder everytime, will every staff member have to have their own folder."
0
Comment
Question by:GordonRae
  • 2
3 Comments
 
LVL 3

Expert Comment

by:RKnebel512
ID: 39884591
Is this a single, communal computer you are talking about?  Or is it a shared drive on the network?
0
 

Author Comment

by:GordonRae
ID: 39884905
It's a domain

With a redirected my documents that points to one folder on the server.

Inside this share everyone has full control and domain users have full control on security

Inside this share there is a downloads folder which I have removed inheritance from and manually put in creator owner with full control and domain users with write and list folder contents

But the users don't want to be able to see all the list folder contents but when I remove list folder contents they cannot access the downloads folder it says access is denied
0
 
LVL 3

Accepted Solution

by:
RKnebel512 earned 500 total points
ID: 39885520
I would create a home directory for each user. You would give each person their own folder.  

- Open up "Active Directory Users and Computers"
- Select all the users
- Right-click and chose properties.
- Go to the profile tab.
- Click the Home Folder check box.
- Select a drive letter.
- In the box put, "\\bigfirm.com\BigFirmShares\Home\%Username%"  (Replace the path with the real path of where these folders will be, but keep the "%Username%".  That will tell windows to just take the username and name the folder that)

This will be much easier to manage permissions.

As to the users not wanting to change where they are saving things, you can change the default to where it will be saved.  I'm sure there are scripts out there to automate it as well.
0

Featured Post

Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Some time ago I faced the need to use a uniform folder structure that spanned across numerous sites of an enterprise to be used as a common repository for the Software packages of the Configuration Manager 2007 infrastructure. Because the procedu…
Remote Apps is a feature in server 2008 which allows users to run applications off Remote Desktop Servers without having to log into them to run the applications.  The user can either have a desktop shortcut installed or go through the web portal to…
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…

831 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question