+ Post New Thread
Results 1 to 10 of 10
MIS Systems Thread, SIMS drive - S: permissions in Technical; I want to set ntfs permissions on the sims S: drive on win2008r2. don't want to go too granular. I ...
  1. #1

    Join Date
    Apr 2010
    Posts
    34
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    SIMS drive - S: permissions

    I want to set ntfs permissions on the sims S: drive on win2008r2. don't want to go too granular. I imagine there are a number of folders that need modify (nova, exams etc) but is there any guidance on tying down the current 'staff Full control' which is how crapita left it?

  2. #2
    mcrompton01's Avatar
    Join Date
    May 2006
    Location
    Burntwood
    Posts
    44
    Thank Post
    1
    Thanked 10 Times in 7 Posts
    Rep Power
    19
    Hi,

    We have the whole drive set to read only apart from the following folders which have the Modify permission:
    \SIMS\SNOVA
    \SIMS\Options
    \SIMS\Star\ctfout
    \SIMS\Star\ctfin
    \SIMS\ascout
    \SIMS\examin
    \SIMS\examout
    \SIMS\examhold
    \SIMS\attend

    These folders were given to us from our County Support unit, however there may be more but we haven't found any in two years.

    Mark

  3. Thanks to mcrompton01 from:

    vikpaw (10th February 2013)

  4. #3

    Join Date
    Apr 2010
    Posts
    34
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    thanks, how about docstorage?

    it disturbs me any staff member can type S: into the address bar and browse the S drive but I can't see how to stop that. S is hidden in my computer but I can't stop them browsing via this method. can't set gpo to restrict 'run' command (which would do it) but this stops software (such as Edexcel livetext) that needs to display and browse folder content working....

  5. #4
    mcrompton01's Avatar
    Join Date
    May 2006
    Location
    Burntwood
    Posts
    44
    Thank Post
    1
    Thanked 10 Times in 7 Posts
    Rep Power
    19
    We have DOCSTORAGE on a separate drive that is not mapped, shared or accessible to staff.

    We don't have the worry about the 'run' command as this is disabled at our site and the F: drive (for us) is hidden from users. We had to take drastic steps after one teacher mistook the F:\ drive for their home directory and deleted anything not to do with history.

    That was a fun day

  6. #5

    Join Date
    Apr 2010
    Posts
    34
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    thanks, do you not have applications on mapped drives that for example are just collections of resources and hence need to be browsed, usually from an index.html or something?

  7. #6
    mcrompton01's Avatar
    Join Date
    May 2006
    Location
    Burntwood
    Posts
    44
    Thank Post
    1
    Thanked 10 Times in 7 Posts
    Rep Power
    19
    We have loads of programs with resources but in most cases we use a public drive that is mapped but hidden with a shortcut to the program e.g index.html or we create virtual CDs. If there are shared resources that need to be browsed we place them on the student or staff shared area and just tell them to look there. For example all the Cubase examples/help are on the student shared.

  8. #7

    Join Date
    Apr 2010
    Posts
    34
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    going slightly off topic here but presumably even if the drive is hidden if they type the mapped drive letter into an explorer address bar they can browse the drive?

  9. #8
    mcrompton01's Avatar
    Join Date
    May 2006
    Location
    Burntwood
    Posts
    44
    Thank Post
    1
    Thanked 10 Times in 7 Posts
    Rep Power
    19
    No, if they enter the drive letter into the address bar they get the error message 'Resource not allowed'. However if they create a shortcut to the drive letter they can browse it, got no real way of stopping that unless I use File Server Resource Manager to prevent .lnk files being created.

  10. #9

    Join Date
    Apr 2010
    Posts
    34
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    ok last question!
    how do you get the 'resource not allowed' message to display? my mapped drive is set in group policy preferences to be hidden and it doesnt appear in my computer but they can def browse it in that way...

  11. #10
    mcrompton01's Avatar
    Join Date
    May 2006
    Location
    Burntwood
    Posts
    44
    Thank Post
    1
    Thanked 10 Times in 7 Posts
    Rep Power
    19
    very good question, I'll try and figure it out today when I get in to work. Found it:

    -> User Configuration
    -> Administrative Templates
    -> Start Menu and Task Bar
    -> Remove Run menu from Start Menu

    This stops them using the run box and IE/Explorers address bars to type in Drive Letters/UNC paths. Not very helpful I know as your first post says you need this disabled (to show the run box).
    Last edited by mcrompton01; 5th February 2013 at 06:58 AM.

SHARE:
+ Post New Thread

Similar Threads

  1. Permissions on your simsroot/sims drive/s: drive
    By Oops_my_bad in forum MIS Systems
    Replies: 3
    Last Post: 30th August 2014, 09:41 PM
  2. [SIMS] Auto upgrading sims on clients (permissions)
    By zag in forum MIS Systems
    Replies: 14
    Last Post: 10th April 2008, 01:38 AM
  3. C: drive NTFS permissions?
    By cookie_monster in forum Windows
    Replies: 4
    Last Post: 6th February 2008, 08:24 AM
  4. Replies: 3
    Last Post: 9th September 2006, 08:13 PM
  5. SIMS Upgrades and Permissions
    By Richie1972 in forum MIS Systems
    Replies: 22
    Last Post: 17th May 2006, 11:12 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •