I have a file server and more than 150 users. How can I allow users to access their own folder and do whatever they want except delete their own folder?
What server are you running?
Here is a way I do Windows 2003. When setting up the top level folder, I
1.Share the folder
a.Permissions are set to everyone (or Domain Users) full control
then on the Security tap, I select Advance and unselect the Allow inheritable permissions from the parent to propagate to this object and all child objects. Include these with entries explicitly defined here. And when prompted select REMOVE. I then use the Add from this window and do the following:
2. ADD - Administrators, System and Creator Owner
a.Apply onto
i.This folder, subfolders and files
b.Permissions
i.Full control
3. ADD - Authenticated users
a.Apply onto
i.This folder, subfolders and files
b.Permissions
i.Read Attributes
ii.Read Extended Attributes
iii.Create Folders / Append Data
iv.Read Permissions
4.Add another Authenticated Users
a.Apply onto
i.This folder only (ensure you are working with top folder)
b.Permissions
i.List Folder / Read Data
I use access based enumeration (ABE) on all Windows Server 2003 with SP1 or later. http://tinyurl.com/cnn6w
Windows Server 2003 Access-based Enumeration makes visible only those files or folders that the user has the rights to access. When Access-based Enumeration is enabled, Windows will not display files or folders that the user does not have the rights to access
http://support.microsoft.com/kb/288991
If you have difficulty following this, let me know.
Good luck
Last Wiki Answer Submitted: April 10, 2008 6:40 pm by Dwiebesick2,220 pts.
All Answer Wiki Contributors: Dwiebesick2,220 pts.
If you live outside the United States, by submitting your email address you consent to having your personal data transferred to and processed in the United States.
I’m not able to test this directly, but what Dwiebesick outlined seems to be a good solution. Also, make sure your users know that they shouldn’t be deleting folders (make it policy) and, of course, consistent backups will come in handy in the event something goes awry.
I’m not able to test this directly, but what Dwiebesick outlined seems to be a good solution. Also, make sure your users know that they shouldn’t be deleting folders (make it policy) and, of course, consistent backups will come in handy in the event something goes awry.