ASAP – Help with Share and their Permission
I need assistance ASAP with Share and Permission. I have a folder call Users (with user personal data in subfolder). I want to share - USERS - and have the users only access their personal folder. (sub-folder under USERS).
My STEPS
I shared folder USERS - added group EVERYONE (it has all users in this group) -- Gave it
FULL CONTROL (when i gave it only READ - the users data in their folder was read-only -
this is why FULL CONTROL.
I went to SECUIRTY and group EVERYONE and gave Read/Execute, List and Read
permissions.
I went to ADVANCED - under EVERYONE - cleared ALLOW INHERITABLE PERMISSIONS
FROM PARENTS....
NEXT --
I went to users folder (sub-folder under share USERS).
went to Security and added the User account
gave user all permissions except FULL CONTROL and SPECIAL PERMISSIONS
went to ADVANCED (under the user) and cleared ALLOW INHERITABLE PERMISSIONS
FROM THE PARENT.
are these the correct steps in creating a share and given the subfolder (user) their permission? If not, please give steps for the example above.
Thanks,
Software/Hardware used:
Software/Hardware used:
ASKED:
May 27, 2008 5:31 PM
UPDATED:
May 28, 2008 10:52 AM
Answer Wiki:
At first view it seems to be correct but why simply don't you let Windows do this?
If you're in an Active Directory (click <i>Start/run/dsa.msc</i>) then select all the users and set their homedrive to <b>\SERVERUSERS%USERNAME%</b> using this method Windows will create subfolders named as the user account and set correct permissions; also you will already have the user's homedrive mapped.
Bye
P.S. Anyway I always prefer granting access to <i>Authenticated Users</i> rather than <i>Everyone</i>
Don't forget to give the Servers Administrators Full Control of the users folders otherwise you won't be able to delete the folders when the user leaves, and more importantly you don't be able to backup the users data.
Good answer, the only additonal comment I have is to try not to grant full control freely, there are subtle differences between having write access and having full control.
To see all answers submitted to the Answer Wiki: View Answer History.
I am moving from a Novell environment to a Microsoft environment into the domain. The accounts have already been created — NDS and AD are synced. Their data will be moved from a Novell server. I am configuring a Microsoft Server 2003.
Thanks,
I would also recommend not messing much with advanced permissions. The NT/AD permissions world is a whole different beast than Novell permissions. Think of it more like *nix permissions: world-group-user.