+ Post New Thread
Results 1 to 8 of 8
Windows Server 2008 R2 Thread, Users moving folders in Technical; Hi I'm hoping to save myself some pain by calling on the collective experience of all you Edugeekers (and hopefully ...
  1. #1

    Join Date
    Nov 2011
    Location
    Cambridgeshire
    Posts
    522
    Thank Post
    141
    Thanked 75 Times in 67 Posts
    Rep Power
    19

    Users moving folders

    Hi

    I'm hoping to save myself some pain by calling on the collective experience of all you Edugeekers (and hopefully save me time in testing too)

    Our users (we're infant and nursery school) keep dragging folders into other folders, which causes chaos when the kids are trying to save their work as they can't find the right place to save. Our system at the minute is that children share logins (I know, I know, but that's a battle I've been working on for 2.5 years and will keep going, but I could do with an interim solution), so the home folder is redirected to the "Pupils" share and within that, each child has a folder in their own name, with the idea that they should build up a portfolio of work during the time they are here. Unsurprisingly, folders keep disappearing, which isn't awful, but completely disrupts the flow of the lesson and takes a lot of adult time which could be better used. We used to have delete prevented, but several programs create some kind of temporary file which is deleted before the save is complete, so that was worse.

    Current structure: \\server\pupils\intake x\pupil name\files

    Ideas I've had:

    Prevent delete on the named folder, but block inheritance and thus allow read, write & del within it. If I was to go with that, any suggestions on how to retrospectively apply this to 300 folders without manually setting each one? Any reasons not to do this?

    Only allow list folder contents at the intake x and above. Does this allow them to open folders/files within from the list or would it prevent them from opening the folder or seeing anything below the restricted level?

    As a final thought, we're also looking at implementing Office 365, mostly to allow teachers remote access to planning documents and provide some resilience to a failure of our single server (it wouldn't be used for any level of confidential data). If I implement that along with some kind of Sharepoint, would that also offer some protection against moving of folders - just something that I came across on Google, but haven't read the detail of yet.

    Sorry for the long post...

  2. #2

    Join Date
    May 2009
    Location
    Sauf London
    Posts
    42
    Thank Post
    24
    Thanked 2 Times in 2 Posts
    Rep Power
    11
    What security permissions do you have on the \\server\pupils\ level?

  3. #3

    Join Date
    Nov 2011
    Location
    Cambridgeshire
    Posts
    522
    Thank Post
    141
    Thanked 75 Times in 67 Posts
    Rep Power
    19
    Quote Originally Posted by TheydonBois View Post
    What security permissions do you have on the \\server\pupils\ level?
    For pupils OU: Read, write, delete - set to inherit all the way down.

  4. #4

    Join Date
    May 2009
    Location
    Sauf London
    Posts
    42
    Thank Post
    24
    Thanked 2 Times in 2 Posts
    Rep Power
    11
    Isnt that too far back then? If you have one user say PRIMARY and it has permissions at that level, it needs to be reset to be at the level of the name of the students.

    For instance, my setup for kids would be E:\Users\ then folders containing all the student logins (they have seperate logins) at the Users folder level however, they have no security permissions, but if I checked E:\USERS\THEYDONBOIS then THEYDONBOIS has Modify permissions.

    Your generic logon account needs to only have access at the PUPIL NAME level.

    Sorry if thats not clear, if not, then I will try and explain it better later

  5. Thanks to TheydonBois from:

    jmak (28th February 2013)

  6. #5
    eddyc's Avatar
    Join Date
    Aug 2008
    Location
    Bristol
    Posts
    438
    Thank Post
    99
    Thanked 47 Times in 43 Posts
    Rep Power
    22
    Could you not set up a login per year group (that is what I did when I worked in a primary) and then set their home folder to \\server\students\yearofintake\ - that way they could only possibly drag their folder into 15 others at the most rather than any other pupils in the school?

  7. Thanks to eddyc from:

    jmak (28th February 2013)

  8. #6

    Join Date
    Nov 2011
    Location
    Cambridgeshire
    Posts
    522
    Thank Post
    141
    Thanked 75 Times in 67 Posts
    Rep Power
    19
    Quote Originally Posted by TheydonBois View Post
    Isnt that too far back then? If you have one user say PRIMARY and it has permissions at that level, it needs to be reset to be at the level of the name of the students.

    For instance, my setup for kids would be E:\Users\ then folders containing all the student logins (they have seperate logins) at the Users folder level however, they have no security permissions, but if I checked E:\USERS\THEYDONBOIS then THEYDONBOIS has Modify permissions.

    Your generic logon account needs to only have access at the PUPIL NAME level.

    Sorry if thats not clear, if not, then I will try and explain it better later
    Thanks. I'll give that a go. I tried removing delete permissions from the folders, which did stop the folders being moved - but unfortunately the files inside the folders did go

    Quote Originally Posted by eddyc View Post
    Could you not set up a login per year group (that is what I did when I worked in a primary) and then set their home folder to \\server\students\yearofintake\ - that way they could only possibly drag their folder into 15 others at the most rather than any other pupils in the school?
    This is essentially my set-up, but we have 80 pupils in each year! So even restricted down to the year group level seems to leave plenty of scope for causing chaos. I might have to change to organising by registration group. The reason I don't already do that is because I would have to move 320 folders around every September!

  9. #7

    Join Date
    May 2009
    Location
    Sauf London
    Posts
    42
    Thank Post
    24
    Thanked 2 Times in 2 Posts
    Rep Power
    11
    Quote Originally Posted by jmak View Post
    Hi

    Current structure: \\server\pupils\intake x\pupil name\files
    ..
    Please test this on non live data first, (or replicate a smaller version of what you have):

    Remove the PRIMARY permissions from the folders above, then import all their names from SIMS or equivalent into an excel file, then concatenate all the text from the colums into one text that you copy into a batch file and run.

    Something like:

    CACLS x:\pupils\intake x\Jack Sparrow /E /T /C /G PRIMARY:C
    CACLS x:\pupils\intake x\Fred Blogs/E /T /C /G PRIMARY:C
    CACLS x:\pupils\intake x\Bobby Ewing /E /T /C /G PRIMARY:C
    CACLS x:\pupils\intake x\Fred Astire /E /T /C /G PRIMARY:C
    CACLS x:\pupils\intake x\Wilma Rubble /E /T /C /G PRIMARY:C

    ...which will apply the PRIMARY account with write permissions to the user folders only, and not the ones above. That way the only files they should be able to move and delete into each other are ones within the students name above.

    Not sure how it will all work with Home Directory as only using one account still means that Fred can go into Bettys folder and delete her work within the folder anyway, even if he cannot delete the Betty root folder.

  10. Thanks to TheydonBois from:

    jmak (28th February 2013)

  11. #8

    Join Date
    Nov 2011
    Location
    Cambridgeshire
    Posts
    522
    Thank Post
    141
    Thanked 75 Times in 67 Posts
    Rep Power
    19
    I'll have a go at the weekend and let you know how I get on.

SHARE:
+ Post New Thread

Similar Threads

  1. Move Files with User Home Folder on Bulk
    By deano in forum Windows Server 2008
    Replies: 5
    Last Post: 17th January 2013, 07:28 PM
  2. Pupils moving folders
    By wadeeuk in forum How do you do....it?
    Replies: 14
    Last Post: 14th November 2007, 07:08 AM
  3. Users Home Folder and Network Drive
    By lovelldr in forum Windows
    Replies: 6
    Last Post: 6th August 2007, 10:17 AM
  4. User moving problem - RM CC3
    By Tuxguy in forum Windows
    Replies: 5
    Last Post: 17th August 2006, 01:00 PM
  5. Prevent users from moving folders ?
    By pooley in forum Windows
    Replies: 2
    Last Post: 9th May 2006, 10:30 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •