Link to home
Start Free TrialLog in
Avatar of AXISHK
AXISHK

asked on

shared folder permission on Window 2008

I need to create a. common share folder on the server. All users can access and create its personnel folder on it. However, the folder can only be acessed by the owner and the domain admin

How to setup the shared and ntfs permission ?

tks
Avatar of Member_2_760301
Member_2_760301
Flag of Ireland image

Hi,

Probably you would like to give permission to everyone (or shared by groups/users) and (administrator group/user too) in security tab and share tab.

Cristian
I honestly create a shared folder for each user and assign share permissions and security to specified user and domain admin. But you have to create it your own
Make a share  with everyone FULL \\Myshare

Then subfolders lock down with NTFS permitions  \\Myshare\filesandfolders
Avatar of AXISHK
AXISHK

ASKER

what's the shared foler and Ntfs permission should I give to u ?

is it really impossible  for users to create its folder and let the permission to. setup automatically,
tks
What will users do? Write / Edit documents or only read them?
Make a SHARE and give share Read/Write Permission. When Create a new folder and Limit The Security NTFS Permissions.
You have to know. If Share have Read Only permission no one can write in this folder no matter what the NTFS permissions are.
I agree with Benjamin Voglar,
Set the share permission to everyone 'full' then lock down at the folder using 'NTFS' permissions, and  assign those permissions to groups rather than individual users.

Anything to do with share and NTFS, permission/access is a manual process, groups make it easier as you only have to set the permissions on the group and add users to that
Allow Full control in share permission to all users with custom NTFS permissions.

Share permissions decides who would access the folder
NTFS permissions are for read/write on folders and files

in your case you have to share a folder for all and restrict users to view other's files and folders.
share1.jpg
share2.jpg
Avatar of AXISHK

ASKER

Seem like it is not what I want...

eg. Both John and Sam can access shared folder mailbackup.

When John create a folder "John", only administrator and John can access it. The similar case apply to Sam where his own folder can't be accessed by John..

Tks
these permissions workes fine already at my side with same scenario as yours.

even users can't see other user's folder because of 'enable enumeration' option.
share.jpg
Avatar of AXISHK

ASKER

so,

share folder permission (RHS) will be set to "Domain Useres" -> Change Access

NTFS permssion (LHS) will be set to
      Authenticated Users   Read & Execute
      Create Owner           Full control
      Administrator           Full control

Correct ? One thing I don't understand is that "authenticated Users" has "Read & Execute" permission, it should able to read other users' folder.  How does it actually work ?

Tks again.
you have to make correction on

Creator Owner            Full Control            Subfolders and files only

Authenricated User   Read & Write with special permissions         This folder and files

and change ownership of the subfolders
ex
\\server\share\John
\\server\share\Sam

so john should be the owner of john's folder and so on
Avatar of AXISHK

ASKER

Tks, it works now.

However, how can I totally hidden the shard folder ? It is a shared folder that keep user's backup using the script and they are not supposed to see on the network..

Tks again.
ASKER CERTIFIED SOLUTION
Avatar of Muhammad Burhan
Muhammad Burhan
Flag of Pakistan image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of AXISHK

ASKER

Tks