[Last Call] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 476
  • Last Modified:

NTFS Folder Permissions

Had a request from a user to have the global downloads folder turned into a secure zone.

Basically need it so everyone can save to it, open their own files, but cannot view anyone elses files.

I have the following permissions in place.

Creator Owner - Full Control
Domain users - Write + List folder contents

The users don't want each other to be able to see the list folder contents but if I remove this it comes up access denied for the entire folder.

The only workaround I have thought of is to create a folder per user within downloads and tie it down so each person has their own folder which only they can view and save into.

But this has been met with "Why do I have to do this, I don't currently choose where I save my downloads will I have to manually move them into my folder everytime, will every staff member have to have their own folder."
0
GordonRae
Asked:
GordonRae
  • 2
1 Solution
 
RKnebel512Commented:
Is this a single, communal computer you are talking about?  Or is it a shared drive on the network?
0
 
GordonRaeAuthor Commented:
It's a domain

With a redirected my documents that points to one folder on the server.

Inside this share everyone has full control and domain users have full control on security

Inside this share there is a downloads folder which I have removed inheritance from and manually put in creator owner with full control and domain users with write and list folder contents

But the users don't want to be able to see all the list folder contents but when I remove list folder contents they cannot access the downloads folder it says access is denied
0
 
RKnebel512Commented:
I would create a home directory for each user. You would give each person their own folder.  

- Open up "Active Directory Users and Computers"
- Select all the users
- Right-click and chose properties.
- Go to the profile tab.
- Click the Home Folder check box.
- Select a drive letter.
- In the box put, "\\bigfirm.com\BigFirmShares\Home\%Username%"  (Replace the path with the real path of where these folders will be, but keep the "%Username%".  That will tell windows to just take the username and name the folder that)

This will be much easier to manage permissions.

As to the users not wanting to change where they are saving things, you can change the default to where it will be saved.  I'm sure there are scripts out there to automate it as well.
0

Featured Post

Keep up with what's happening at Experts Exchange!

Sign up to receive Decoded, a new monthly digest with product updates, feature release info, continuing education opportunities, and more.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now