shared folder permission on Window 2008

I need to create a. common share folder on the server. All users can access and create its personnel folder on it. However, the folder can only be acessed by the owner and the domain admin

How to setup the shared and ntfs permission ?

Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

A. Cristian CsikiSenior System AdministratorCommented:

Probably you would like to give permission to everyone (or shared by groups/users) and (administrator group/user too) in security tab and share tab.

A. Cristian CsikiSenior System AdministratorCommented:
I honestly create a shared folder for each user and assign share permissions and security to specified user and domain admin. But you have to create it your own
Benjamin VoglarIT ProCommented:
Make a share  with everyone FULL \\Myshare

Then subfolders lock down with NTFS permitions  \\Myshare\filesandfolders
Acronis True Image 2019 just released!

Create a reliable backup. Make sure you always have dependable copies of your data so you can restore your entire system or individual files.

AXISHKAuthor Commented:
what's the shared foler and Ntfs permission should I give to u ?

is it really impossible  for users to create its folder and let the permission to. setup automatically,
Benjamin VoglarIT ProCommented:
What will users do? Write / Edit documents or only read them?
Make a SHARE and give share Read/Write Permission. When Create a new folder and Limit The Security NTFS Permissions.
You have to know. If Share have Read Only permission no one can write in this folder no matter what the NTFS permissions are.
I agree with Benjamin Voglar,
Set the share permission to everyone 'full' then lock down at the folder using 'NTFS' permissions, and  assign those permissions to groups rather than individual users.

Anything to do with share and NTFS, permission/access is a manual process, groups make it easier as you only have to set the permissions on the group and add users to that
Muhammad BurhanManager I.T.Commented:
Allow Full control in share permission to all users with custom NTFS permissions.

Share permissions decides who would access the folder
NTFS permissions are for read/write on folders and files

in your case you have to share a folder for all and restrict users to view other's files and folders.
AXISHKAuthor Commented:
Seem like it is not what I want...

eg. Both John and Sam can access shared folder mailbackup.

When John create a folder "John", only administrator and John can access it. The similar case apply to Sam where his own folder can't be accessed by John..

Muhammad BurhanManager I.T.Commented:
these permissions workes fine already at my side with same scenario as yours.

even users can't see other user's folder because of 'enable enumeration' option.
AXISHKAuthor Commented:

share folder permission (RHS) will be set to "Domain Useres" -> Change Access

NTFS permssion (LHS) will be set to
      Authenticated Users   Read & Execute
      Create Owner           Full control
      Administrator           Full control

Correct ? One thing I don't understand is that "authenticated Users" has "Read & Execute" permission, it should able to read other users' folder.  How does it actually work ?

Tks again.
Muhammad BurhanManager I.T.Commented:
you have to make correction on

Creator Owner            Full Control            Subfolders and files only

Authenricated User   Read & Write with special permissions         This folder and files

and change ownership of the subfolders

so john should be the owner of john's folder and so on
AXISHKAuthor Commented:
Tks, it works now.

However, how can I totally hidden the shard folder ? It is a shared folder that keep user's backup using the script and they are not supposed to see on the network..

Tks again.
Muhammad BurhanManager I.T.Commented:
\\Server\Backup is the folder
share it with Backup$
so it will not be listed in the location \\Server\

or change the folder's name to Backup$ then share it with the same name

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
AXISHKAuthor Commented:
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.