Discussion Locked

Windows 2000 permission

0 helpful
7 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I'm currently responsible to set 100 PC using Win2k, i'm having a problem here, I was requested to set the permisison for users that cannot delete, modifying, and even create files in the folders and subfolders. And I was also requested to disable users rights to view files inside folders and subfolders. I need help to configure this permission. And I had tried to configure, but still can delete files in the C drive. And I was also requested to set quota for users. Anyway that can assist me?

7 replies

by taiseermustafa

Yes very strange request, your users will access computers only for monitoring..!!!
any way I am afraid that you need to go to each PC and right click on the C drive go to sharing then go to security tab.
you will see that everyone can access the C, uncheck all options you need, and leave the read option.
Make sure to remove the users from the Power users group of the local machine...

Good luck

any further help please mail.

by computechie

I'll attempt to do this the best I can, I'm not a teacher, I'm a tech so this explanation might be harder to understand. By default, Win2K gives everyone full access, so this is going to take a bit of work to get all these permissions set. To set the permissions so your users can't delete, modify or create files in folders, you'll need to make the directorys so that they can't read, write or execute files & folders, or you can use Win2K's Deny feature in the permissions, but you can run into trouble with it. By default, Win2K uses Inheritance, which will make the permissions follow all the way down to each subdirectory and files, which will make it simpler because you just need to set the permissions to the "parent" folder. It will probably take some tinkering around to get the permissions to work well, without makeing the computer unusable, which can be done, trust me. To set up quota's is much easier, just right click on the on the drives under My Computer, and there is a Quota tab there, just enable quotas, and set the maximum limit, and the limit in which it notify's users that they are getting close to exceding their limit. Also check the box that doesn't let them excede the quota. Also, the easiest way to get all these users set up, is to make one group, and apply the permissions and quotas to that group, so you don't have to do all this to each user. I hope this helps you get on the right track, if you need anymore help, go ahead and email me and I'll play around withmy Win2K machines at work and help you out some more. computechie99@yahoo.com

by william jay

Both answers so far are partly correct, and partly right out to lunch, as is the question as asked, as is the request by the 'suits' to do this. What good is a machine that one cannot DO anything on? By the way, Administrators have all rights to allfiles all the time, so for sure if you do not have a test username to try this with, then it will fail for you and apply to everyone with a lesser status.

Please refer to the win2k documentation on Group Policy Objects, and on permissions, and quotas. Please post more info on what you really want to accomplish here and what we have to work with, (types of servers and particulars of network setup will help us to help you quicker) ...

This discussion is closed to new replies.