Denying Windows network access
I run a computer lab in a high school. We have a multi-platform environment with 12 XP Pro machines, six Windows 2000 machines and eight Vista Home machines. We are experiencing problems with students accessing class folders and deleting files. All students log in as student. I need a strategy to prevent all student users from moving and or deleting files. They need to be able to add files to their grade level, folders.
Software/Hardware used:
Software/Hardware used:
ASKED:
February 26, 2008 3:58 PM
UPDATED:
February 29, 2008 11:36 PM
Answer Wiki:
You would do this with NTFS permissions.
I would start off by creating a group that would contain all the students. Add the deny delete permission to this user to the folders and/or files that need to be more secured.
At the community college where I teach, we allow read only to shared resources and then set up a student share where students can upload/copy files to that does not allow deletion.
To see all answers submitted to the Answer Wiki: View Answer History.
The answer provided certainly works, but I would also add that it will be tough to keep all of the user accounts for students, teachers, and others that you create synchronized across all of your machines without an Active Directory domain, something you can get from Windows 2000 Server, Windows Server 2003, or the newly released Windows Server 2008. You’ll be forced to make any change on all of the machines, as they will not share account information among themselves.
You might be better off to look for an old machine and an unused, genuine copy of Windows 2000 Server and join all of the machines (except the Vista Home machines — Vista Home cannot join a domain) to the domain, and then create your groups and users on the domain controller.
What JonHassell stated is absolutely correct. You really need to implement a domain model because the level of administrative effort required to maintain more than 10 local computers really adds up. Doing so will allow administration and access to network resources to be centralized. You can also then better segregate groups and data; however, the eight Windows Vista Home computers would have to be upgraded or replaced.