+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 30
MIS Systems Thread, SIMS NTFS Permissions? in Technical; Hopefully an edugeeker will be able to answer my question before monday. Im restructuring our S drive which sims sits ...
  1. #1

    Join Date
    Mar 2007
    Posts
    323
    Thank Post
    6
    Thanked 7 Times in 6 Posts
    Rep Power
    17

    SIMS NTFS Permissions?

    Hopefully an edugeeker will be able to answer my question before monday.

    Im restructuring our S drive which sims sits in. I've restricted staff from a lot of folders. However, the SIMS folder has always been completely unrestricted to staff. I want to ensure staff can't take ownership etc or delete files.

    What set of permissions do you have in your setup of the SIMS folder?

    Thanks

    Phil

  2. #2

    Join Date
    Mar 2007
    Posts
    323
    Thank Post
    6
    Thanked 7 Times in 6 Posts
    Rep Power
    17
    Actually I think the answer is FULL CONTROL still judging from prior posts. Is this still the case though?

  3. #3

    Join Date
    Feb 2008
    Location
    Wiltshire
    Posts
    905
    Thank Post
    287
    Thanked 141 Times in 114 Posts
    Blog Entries
    28
    Rep Power
    42
    A standard user should never have Full Control. This is the permission that essentially allows them to change permissions, etc. All it takes is one user at the top of a folder structure to wipe out any permissions down the tree. Full Control should only used by Administrators, etc. Also, give access to the 'Deny' permission and it's just asking for trouble. I was always taught that you should never need Deny permissions to be set either, as you should be able to control access to a resource by only granting what is needed.

    Last place I worked was managed system by EDS where the main public share all users had full control over. So all these folders were being created with specific permissions for users and groups, and on a regular basis we would have to make a phone call to the helpdesk to get the permissions reset as someone had overwritten things. Nightmare.

    Our setup for SIMS is that a drive mapping is made to the S: drive but it is hidden. Also, I believe (set this up a while ago) that they have Read only access to it as well. You do however need modify to do a fresh install SIMS on to a workstation as it writes to the S: drive during the install .

    Also, remember to exclude the s:\sims\setups from the On-Access on your Anti-Virus policy as this slows down the launch of SIMS.

    HTH

    Pete

  4. #4
    User3204's Avatar
    Join Date
    Aug 2006
    Location
    Wirral
    Posts
    769
    Thank Post
    55
    Thanked 66 Times in 62 Posts
    Rep Power
    35
    I have Full Control for my S: drive, although this is limited to a group called "SIMS Staff" (which is limited to all staff.. ).

    Ideally, though, I would prefer to have it properly set, but I have never found any instructions within the Capita docs that say what it should be (not that I have specifically looked though).

  5. #5

    Join Date
    Sep 2006
    Location
    London
    Posts
    1,404
    Thank Post
    38
    Thanked 387 Times in 262 Posts
    Rep Power
    85
    There has never been a need for staff to have full access rights to use or upgrade SIMS.

  6. #6

    Gatt's Avatar
    Join Date
    Jan 2006
    Posts
    6,820
    Thank Post
    883
    Thanked 685 Times in 454 Posts
    Rep Power
    505
    what permission level does the SIMSPERM.BAT file set?
    I know that if this hasn't been run then users cannot run the workstation upgrades..

    Our S: Drive & SIMS Server is maintained by the LEA, though I tend to double check SOLUS has run and that the upgrades apply to all the clients.

  7. #7
    danrhodes's Avatar
    Join Date
    Sep 2008
    Location
    Wath Upon Dearne
    Posts
    1,514
    Thank Post
    157
    Thanked 181 Times in 150 Posts
    Rep Power
    68

    Cool

    Our staff seem to have Read/Write access to S. This has always worked for us.

    D

  8. #8
    AyatollahPies's Avatar
    Join Date
    Jan 2008
    Location
    Earth
    Posts
    900
    Thank Post
    48
    Thanked 105 Times in 95 Posts
    Rep Power
    43
    Quote Originally Posted by FragglePete View Post
    A standard user should never have Full Control. This is the permission that essentially allows them to change permissions, etc. All it takes is one user at the top of a folder structure to wipe out any permissions down the tree. Full Control should only used by Administrators, etc. Also, give access to the 'Deny' permission and it's just asking for trouble. I was always taught that you should never need Deny permissions to be set either, as you should be able to control access to a resource by only granting what is needed.

    Last place I worked was managed system by EDS where the main public share all users had full control over. So all these folders were being created with specific permissions for users and groups, and on a regular basis we would have to make a phone call to the helpdesk to get the permissions reset as someone had overwritten things. Nightmare.

    Our setup for SIMS is that a drive mapping is made to the S: drive but it is hidden. Also, I believe (set this up a while ago) that they have Read only access to it as well. You do however need modify to do a fresh install SIMS on to a workstation as it writes to the S: drive during the install .

    Also, remember to exclude the s:\sims\setups from the On-Access on your Anti-Virus policy as this slows down the launch of SIMS.

    HTH

    Pete
    Does this work fine for Workstation upgrades too?

  9. #9
    Mcshammer_dj's Avatar
    Join Date
    Feb 2007
    Location
    Portsmouth
    Posts
    991
    Thank Post
    39
    Thanked 180 Times in 145 Posts
    Rep Power
    98
    The read/write access to the S: drive is historic from the days of common platform and even earlier when SIMS was a series of DOS modules.

    SInce that data is now held in SQL and and documents are maintained in the docstorage the open access to the drive should be reveiwed.

    Our SIMS shared drives are configured for users to see certain area's only depending on their role in the school.

    All can see the route H:\sims to allow for a central connect.ini, and then only the sims star folder is accessable admin staff who need to see either the CTF's or the datafeeds.
    We then have an area available to specific staff that hold data that is sent to the LEA via AVCO. This includes the location of the census and SWC returns.

    The SIMSPerm.bat is only designed to set the local machine with athe correct security levels.

  10. #10

    Join Date
    Mar 2006
    Location
    Chelmsford
    Posts
    115
    Thank Post
    0
    Thanked 4 Times in 4 Posts
    Rep Power
    19
    Quote Originally Posted by PhilNeal View Post
    There has never been a need for staff to have full access rights to use or upgrade SIMS.
    Can't get NOVA T4 or T6 to work without full access rights for those staff that use NOVA.

  11. #11
    BatchFile's Avatar
    Join Date
    Aug 2007
    Location
    Cumbria
    Posts
    963
    Thank Post
    550
    Thanked 129 Times in 107 Posts
    Rep Power
    60
    There's little in the S: drive these days that staff would need full access to... SNOVA folder for nova users (that don't log in to T4 as "default user"(?)) could be one, but I don't really see the need for anywhere else as everything else goes straight into SQL these days.

    Having said that, or looking at the same point from a different direction I suppose, so long as you've got a backup of the SNOVA folder since the last timetable change and the S: drive since the last upgrade, nothing much else should change day to day

  12. #12
    Mcshammer_dj's Avatar
    Join Date
    Feb 2007
    Location
    Portsmouth
    Posts
    991
    Thank Post
    39
    Thanked 180 Times in 145 Posts
    Rep Power
    98
    Quote Originally Posted by pmassingham View Post
    Can't get NOVA T4 or T6 to work without full access rights for those staff that use NOVA.
    have you run the Simsperm file on the local machine for the user or group?

  13. #13

    Join Date
    Mar 2007
    Posts
    323
    Thank Post
    6
    Thanked 7 Times in 6 Posts
    Rep Power
    17

    Exclamation

    We've been told to run wssecurity

    Btw does anyone actually know what permissions this makes? It takes an aweful long while. I imagine it to be setting full control to everything including the reg settings or something!

    We all talk about it setting permissions, but what permissions? I've installed workstations without running this and they still work. This maybe because I've set them up as local admins.

    Since last weekend, I defragged the D: drive on our sims server and everythings very very slow. Queries are taking extra long. I've been in touch with .ICT and they said that defragging will only improve file system performance. They then tried to re-index the sims database but this has not fixed the slowness problem. We're flatlining the CPU with 100% everytime a staff member pulls down the simplest of queries.

    I'm beginning to wonder if its a mssql issue?

    Please help!

  14. #14
    Mcshammer_dj's Avatar
    Join Date
    Feb 2007
    Location
    Portsmouth
    Posts
    991
    Thank Post
    39
    Thanked 180 Times in 145 Posts
    Rep Power
    98
    post the spec of the server that you are using

  15. #15
    Mcshammer_dj's Avatar
    Join Date
    Feb 2007
    Location
    Portsmouth
    Posts
    991
    Thank Post
    39
    Thanked 180 Times in 145 Posts
    Rep Power
    98
    Quote Originally Posted by techyphil View Post
    We've been told to run wssecurity
    What is WSSecurity and where do you find it???



SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Replies: 4
    Last Post: 29th July 2009, 03:49 PM
  2. Help with NTFS permissions problem...
    By kennysarmy in forum Windows
    Replies: 5
    Last Post: 7th February 2008, 03:29 PM
  3. C: drive NTFS permissions?
    By cookie_monster in forum Windows
    Replies: 4
    Last Post: 6th February 2008, 09:24 AM
  4. GTK restrict drives and NTFS permissions
    By CyberNerd in forum Thin Client and Virtual Machines
    Replies: 2
    Last Post: 11th May 2007, 06:32 PM
  5. Mass setting NTFS permissions
    By localzuk in forum Windows
    Replies: 7
    Last Post: 8th January 2007, 05:23 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •