Server 2012 R2: Granting helpdesk rights on \\server\c$\windows\ccm\logs only


On a Windows 2012 R2 server, what would be safest way to grant helpdesk users readonly on a log folder, f.e. \\server\c$\windows\ccm\logs ?
Creating a share for only that reason? Wouldn't there be an easier way?

Who is Participating?
Jeremy WeisingerSenior Network Consultant / EngineerCommented:
Create the share and set the permissions is the easiest way IMO.

Making a share is pretty easy. If you do so, be sure to first make a group named something like "Help Desk", if you haven't yet. Then, add the users into that group. Then add the group into the NTFS and Share permissions.

How easy do you need it to be?

Do you need to do this on lots of systems? If so, you can use NET SHARE and ICACLS to help speed things.
janhoedtAuthor Commented:
Ok, I'd like to do that on multiple servers.
So that would be server01,server02,server03
Create share server01 c:\windows\ccm\logs sharename logs, permissions domain\helpdesk readonly

Howto do this in powershell?
Jeremy WeisingerSenior Network Consultant / EngineerCommented:
While I'm all for using powershell whenever possible, this would really be done quickest by just going and sharing out the folders on the 3 servers.

If this is going to be a recurring task then scripting it would be ideal.
janhoedtAuthor Commented:
Who said there were only 3 servers? That was just an example. There are many more.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.