troubleshooting Question

Share/Ntfs Permissions, the Right way.

Avatar of jskfan
jskfanFlag for Cyprus asked on
Windows Server 2008Active Directory
8 Comments4 Solutions132 ViewsLast Modified:
Share/Ntfs Permissions, the Right way.

I have seen 2 ways Administrators design their  Share/Ntfs Permissions.

**Some Administrators , create a Share  and give Authenticated Users Full Control in Share permissions. Then in Security tab of the Share they give permissions to Active Directory Groups that needs to have access to the Share and folders inside the Share.

**Other Administrators, they create a Share and give Authenticated Users Full Control in Share Permissions. in Security tab of the Share , they leave everything to the default, they do not change anything.
Then they create a folder inside the Share, they name it for instance "Departments" which will be the top folder. in Security tab of "Departments" folder,they give READ permissions to Authenticated Users (This folder Only), and they give for instance Domain Admins, Enterprise Admins, Full Control (This folder, Subfolders and Files).

Then Under "Departments" folder , when they get a request , they will create folders for each department, ex : Accounting, Marketing,etc...and they add appropriate AD group to the folder permissions.

---So I am familiar with the second options that Administrator use, but I am not sure if the first option is best practice or it is wrong, or is something to avoid.

any Clarification will be very much appreciated.


Thank you
ASKER CERTIFIED SOLUTION
Adam Brown
Cloud Security Consultant

Our community of experts have been thoroughly vetted for their expertise and industry experience.

Top Expert 2010

The Distinguished Expert awards are presented to the top veteran and rookie experts to earn the most points in the top 50 topics.

Join our community to see this answer!
Unlock 4 Answers and 8 Comments.
Start Free Trial
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 4 Answers and 8 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros