+ Post New Thread
Results 1 to 11 of 11
General Chat Thread, Protecting staff shared area from staff deleting folders by "accident" in General; We currently have a shared folder called staff that all the staff have access to. Within that are folders such ...
  1. #1
    reggiep's Avatar
    Join Date
    Apr 2008
    Location
    In the vast area of space and time
    Posts
    1,550
    Thank Post
    518
    Thanked 56 Times in 50 Posts
    Rep Power
    30

    Protecting staff shared area from staff deleting folders by "accident"

    We currently have a shared folder called staff that all the staff have access to. Within that are folders such as Admin, pupil premium, geog, humanities etc.
    This morning somebody noticed that the pupil premium folder had been deleted by presons unknow.
    I restored it with shadow copy from yesterday lunch which nice.
    However I have now been asked to lock it down so staff can't delete folders!
    I could set permissions on all these folders so that staff can't delete them but then they might delete subfolders. DO I then set it so they can't delete sub folders. Of course there are the files themselves. Do I do the same on that so that staff cannot delete anything at all in those folders?
    How much of a burden does this then create for staff to have to contact me to request a file to be deleted?
    Anyone any thoughts on this?

  2. #2

    Andrew_C's Avatar
    Join Date
    Sep 2005
    Location
    Winchester
    Posts
    3,087
    Thank Post
    64
    Thanked 404 Times in 307 Posts
    Rep Power
    165
    You sure it was deleted? What ours have done in the past is a sort of "Clickkkdraaaggg" and drop it in another folder. Can't be found unless you can search for something in it.

  3. #3
    reggiep's Avatar
    Join Date
    Apr 2008
    Location
    In the vast area of space and time
    Posts
    1,550
    Thank Post
    518
    Thanked 56 Times in 50 Posts
    Rep Power
    30
    Good thought! But still I have been tasked with this now!

  4. #4

    fiza's Avatar
    Join Date
    Dec 2008
    Location
    London
    Posts
    2,270
    Thank Post
    456
    Thanked 323 Times in 273 Posts
    Rep Power
    155
    Wont the shared folder get clogged up with rubbish because users cant delete anything? Give majority of staff read access to the important stuff and read/write to those who need it or you could lock it down so only "owner" could delete?

  5. #5
    reggiep's Avatar
    Join Date
    Apr 2008
    Location
    In the vast area of space and time
    Posts
    1,550
    Thank Post
    518
    Thanked 56 Times in 50 Posts
    Rep Power
    30
    Quote Originally Posted by fiza View Post
    Wont the shared folder get clogged up with rubbish because users cant delete anything? Give majority of staff read access to the important stuff and read/write to those who need it or you could lock it down so only "owner" could delete?
    I like the owner idea, I was just looking into that now!

  6. #6
    bushby's Avatar
    Join Date
    Jul 2010
    Location
    winchester
    Posts
    538
    Thank Post
    61
    Thanked 62 Times in 54 Posts
    Rep Power
    31
    im in the same thing at the moment,

    what im doing is the root of the staff shares are locked down so that only the ict team can make the folders then with in them the sub-folders are then managed by the retentive personal.

  7. #7
    reggiep's Avatar
    Join Date
    Apr 2008
    Location
    In the vast area of space and time
    Posts
    1,550
    Thank Post
    518
    Thanked 56 Times in 50 Posts
    Rep Power
    30
    Quote Originally Posted by bushby View Post
    retentive personal.
    I like the sound of those staff!

  8. #8
    zag
    zag is offline
    zag's Avatar
    Join Date
    Mar 2007
    Posts
    3,946
    Thank Post
    967
    Thanked 461 Times in 388 Posts
    Blog Entries
    12
    Rep Power
    94
    We make the root read only and all the folders inside writeable.

    Most of the time its staff clicking and dragging folders, and this method prevents that in most cases

    This also protects from viruses that copy themselves to shared drives such as conflicker.

  9. #9

    Ephelyon's Avatar
    Join Date
    Aug 2008
    Location
    Cheshire, England
    Posts
    1,784
    Thank Post
    332
    Thanked 375 Times in 234 Posts
    Rep Power
    151
    Keep the permissions the same, but enable shadow copies and access auditing for delete operations on that folder?

  10. #10
    mjs_mjs's Avatar
    Join Date
    Jan 2009
    Location
    bexleyheath, london
    Posts
    1,021
    Thank Post
    37
    Thanked 111 Times in 95 Posts
    Rep Power
    37
    Quote Originally Posted by bushby View Post
    what im doing is the root of the staff shares are locked down so that only the ict team can make the folders then with in them the sub-folders are then managed by the retentive personal.
    I did this 4-6 years ago going from RM cc3-cc4. I used DFS, and had the staff shared, student shared and the archives appear all on 'one' drive for users. It got alot of questions but soon people realised that it was quite a good idea. Everything in one place, but with super restrictive ntfs and individual share permissions.

    Top level was DFS, next level was folders I set, and only IT tech could change/add/modify, within that there were departmental folders with restricted permissions to staff/students and the archive was read only for staff.

    Devil is in the detail - just make sure you enforce a strict principle of least access.

    Shadow copies were also enabled but only for IT tech's.

  11. #11
    xenonive's Avatar
    Join Date
    Mar 2008
    Location
    Colchester
    Posts
    222
    Thank Post
    37
    Thanked 47 Times in 41 Posts
    Rep Power
    25
    I agree about setting the permissions correctly.We just enable shadow copies twice a day on the share then if something is deleted we can restore it back to date it was there.



SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 1
    Last Post: 13th May 2012, 11:31 PM
  2. Replies: 3
    Last Post: 14th January 2011, 09:55 PM
  3. Wanted: VBScript to delete folders from C:
    By timbo343 in forum Scripts
    Replies: 7
    Last Post: 7th February 2008, 12:50 PM
  4. Shared Area Folder
    By wesleyw in forum Windows
    Replies: 1
    Last Post: 30th January 2008, 01:53 PM
  5. Restrict where staff can install from
    By daverage in forum Wireless Networks
    Replies: 13
    Last Post: 24th November 2005, 09:33 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •