Networks

Ask something
Question Locked

File Server Folder Permissions Help

0 helpful
3 replies

by jamiegisi

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
We have a Win 2k3 server that we are using as a file server for various documents (.doc,.xls,.pdf) for all of our clients. We have a main folder (Master Client) with subfolders for every client we have. The issue we are having is that people have full control and can and do offten move the folders into a different client. Then when you need to find the client folder you cannot. Is there anyway that we can limit the ability to move folders through the permissions? If so how? I know I cannot limit the delete, but that is all that I can find. Thanks guys you will be helping out big time!!!!

3 replies

by ---tk---

first here is a link:
http://technet.microsoft.com/en-us/library/bb727008.aspx

second... only give domain/admnins and local/admin's full control permission to the highest folder (should populate down)... then add domain/users as read, and list contents.... then down in each subfolderX group X (user A,B,C are apart of this group) gets all except "full control"... subfolderY group Y (user D,E,F are apart of this group) get all except "full control"... are you following??
Also every user needs to be part of domain/user group... or they will not be able to see anything... this way group Y can not see group X's stuff or delete it... and vise versa...

**I would test all this out on a test box before you go setting permissions, so you can practice, practice, practice!!

Don't give full control to users, plain and simple.. Only to Administrators!! reason being, every user (no offense to users) but they "already did that", or "I already knew that" its all the same... thats why we make it so they can't F*** it all up!

Hopefully this helps, there is alot more to it... but its been a while since I have dealt with permissions... so that is all by memory... Good luck! and post up if you have any more questions.

by ---tk---

"Don't give full control to users" when dealing with personal mapped drives we dedicate a Home Folder under users Properties \\server_name\USER$ we do give them full control they are held accountable for their own data.... just not shared data... Also when dealing with roaming profiles its a little different also..

This discussion is closed to new replies.