Link to home
Create AccountLog in
Avatar of janhoedt
janhoedt

asked on

Server 2012 R2: Granting helpdesk rights on \\server\c$\windows\ccm\logs only

Hi,

On a Windows 2012 R2 server, what would be safest way to grant helpdesk users readonly on a log folder, f.e. \\server\c$\windows\ccm\logs ?
Creating a share for only that reason? Wouldn't there be an easier way?

J.
ASKER CERTIFIED SOLUTION
Avatar of Jeremy Weisinger
Jeremy Weisinger

Link to home
membership
Create a free account to see this answer
Signing up is free and takes 30 seconds. No credit card required.
See answer
Agreed.

Making a share is pretty easy. If you do so, be sure to first make a group named something like "Help Desk", if you haven't yet. Then, add the users into that group. Then add the group into the NTFS and Share permissions.

How easy do you need it to be?

Do you need to do this on lots of systems? If so, you can use NET SHARE and ICACLS to help speed things.
Avatar of janhoedt
janhoedt

ASKER

Ok, I'd like to do that on multiple servers.
So that would be server01,server02,server03
Create share server01 c:\windows\ccm\logs sharename logs, permissions domain\helpdesk readonly

Howto do this in powershell?
While I'm all for using powershell whenever possible, this would really be done quickest by just going and sharing out the folders on the 3 servers.

If this is going to be a recurring task then scripting it would be ideal.
Who said there were only 3 servers? That was just an example. There are many more.