+ Post New Thread
Results 1 to 11 of 11
General Chat Thread, Protecting staff shared area from staff deleting folders by "accident" in General; We currently have a shared folder called staff that all the staff have access to. Within that are folders such ...
  1. #1
    reggiep's Avatar
    Join Date
    Apr 2008
    Location
    In the vast area of space and time
    Posts
    1,548
    Thank Post
    517
    Thanked 56 Times in 50 Posts
    Rep Power
    29

    Protecting staff shared area from staff deleting folders by "accident"

    We currently have a shared folder called staff that all the staff have access to. Within that are folders such as Admin, pupil premium, geog, humanities etc.
    This morning somebody noticed that the pupil premium folder had been deleted by presons unknow.
    I restored it with shadow copy from yesterday lunch which nice.
    However I have now been asked to lock it down so staff can't delete folders!
    I could set permissions on all these folders so that staff can't delete them but then they might delete subfolders. DO I then set it so they can't delete sub folders. Of course there are the files themselves. Do I do the same on that so that staff cannot delete anything at all in those folders?
    How much of a burden does this then create for staff to have to contact me to request a file to be deleted?
    Anyone any thoughts on this?

  2. #2

    Andrew_C's Avatar
    Join Date
    Sep 2005
    Location
    Winchester
    Posts
    2,961
    Thank Post
    64
    Thanked 374 Times in 284 Posts
    Rep Power
    158
    You sure it was deleted? What ours have done in the past is a sort of "Clickkkdraaaggg" and drop it in another folder. Can't be found unless you can search for something in it.

  3. #3
    reggiep's Avatar
    Join Date
    Apr 2008
    Location
    In the vast area of space and time
    Posts
    1,548
    Thank Post
    517
    Thanked 56 Times in 50 Posts
    Rep Power
    29
    Good thought! But still I have been tasked with this now!

  4. #4

    fiza's Avatar
    Join Date
    Dec 2008
    Location
    London
    Posts
    2,095
    Thank Post
    407
    Thanked 310 Times in 262 Posts
    Rep Power
    152
    Wont the shared folder get clogged up with rubbish because users cant delete anything? Give majority of staff read access to the important stuff and read/write to those who need it or you could lock it down so only "owner" could delete?

  5. #5
    reggiep's Avatar
    Join Date
    Apr 2008
    Location
    In the vast area of space and time
    Posts
    1,548
    Thank Post
    517
    Thanked 56 Times in 50 Posts
    Rep Power
    29
    Quote Originally Posted by fiza View Post
    Wont the shared folder get clogged up with rubbish because users cant delete anything? Give majority of staff read access to the important stuff and read/write to those who need it or you could lock it down so only "owner" could delete?
    I like the owner idea, I was just looking into that now!

  6. #6
    bushby's Avatar
    Join Date
    Jul 2010
    Location
    winchester
    Posts
    528
    Thank Post
    59
    Thanked 61 Times in 53 Posts
    Rep Power
    30
    im in the same thing at the moment,

    what im doing is the root of the staff shares are locked down so that only the ict team can make the folders then with in them the sub-folders are then managed by the retentive personal.

  7. #7
    reggiep's Avatar
    Join Date
    Apr 2008
    Location
    In the vast area of space and time
    Posts
    1,548
    Thank Post
    517
    Thanked 56 Times in 50 Posts
    Rep Power
    29
    Quote Originally Posted by bushby View Post
    retentive personal.
    I like the sound of those staff!

  8. #8
    zag
    zag is offline
    zag's Avatar
    Join Date
    Mar 2007
    Posts
    3,762
    Thank Post
    897
    Thanked 416 Times in 350 Posts
    Blog Entries
    12
    Rep Power
    86
    We make the root read only and all the folders inside writeable.

    Most of the time its staff clicking and dragging folders, and this method prevents that in most cases

    This also protects from viruses that copy themselves to shared drives such as conflicker.

  9. #9

    Ephelyon's Avatar
    Join Date
    Aug 2008
    Location
    Cheshire, England
    Posts
    1,658
    Thank Post
    287
    Thanked 318 Times in 192 Posts
    Rep Power
    141
    Keep the permissions the same, but enable shadow copies and access auditing for delete operations on that folder?

  10. #10
    mjs_mjs's Avatar
    Join Date
    Jan 2009
    Location
    bexleyheath, london
    Posts
    1,018
    Thank Post
    37
    Thanked 111 Times in 95 Posts
    Rep Power
    37
    Quote Originally Posted by bushby View Post
    what im doing is the root of the staff shares are locked down so that only the ict team can make the folders then with in them the sub-folders are then managed by the retentive personal.
    I did this 4-6 years ago going from RM cc3-cc4. I used DFS, and had the staff shared, student shared and the archives appear all on 'one' drive for users. It got alot of questions but soon people realised that it was quite a good idea. Everything in one place, but with super restrictive ntfs and individual share permissions.

    Top level was DFS, next level was folders I set, and only IT tech could change/add/modify, within that there were departmental folders with restricted permissions to staff/students and the archive was read only for staff.

    Devil is in the detail - just make sure you enforce a strict principle of least access.

    Shadow copies were also enabled but only for IT tech's.

  11. #11

    Join Date
    Mar 2008
    Location
    Colchester
    Posts
    183
    Thank Post
    31
    Thanked 37 Times in 31 Posts
    Rep Power
    22
    I agree about setting the permissions correctly.We just enable shadow copies twice a day on the share then if something is deleted we can restore it back to date it was there.

SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 1
    Last Post: 13th May 2012, 10:31 PM
  2. Replies: 3
    Last Post: 14th January 2011, 08:55 PM
  3. Wanted: VBScript to delete folders from C:
    By timbo343 in forum Scripts
    Replies: 7
    Last Post: 7th February 2008, 11:50 AM
  4. Shared Area Folder
    By wesleyw in forum Windows
    Replies: 1
    Last Post: 30th January 2008, 12:53 PM
  5. Restrict where staff can install from
    By daverage in forum Wireless Networks
    Replies: 13
    Last Post: 24th November 2005, 08:33 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •