+ Post New Thread
Results 1 to 12 of 12
Windows Server 2008 R2 Thread, NTFS permissions in Technical; I'm sure this could be done. I have one folder, I wish students to be able to read/write/delete their own ...
  1. #1

    Join Date
    Nov 2011
    Location
    Winchester
    Posts
    22
    Thank Post
    1
    Thanked 2 Times in 2 Posts
    Rep Power
    7

    NTFS permissions

    I'm sure this could be done.

    I have one folder, I wish students to be able to read/write/delete their own files but not another students in the same folder.
    The folder is empty until used by a student.

    I was thinking you had to use CREATOR OWNER, SELF or something in the permissions.
    I have given all students base level Traverse folder & List Folder access.

    I just can't get them to create a file with only their permission.


    Any thoughts?

    Many Thanks
    Kyle.

  2. #2
    sister_annex's Avatar
    Join Date
    Jan 2009
    Location
    Wolverhampton
    Posts
    616
    Thank Post
    103
    Thanked 144 Times in 125 Posts
    Rep Power
    52
    I think it may just be the case of giving Creator Owner modify (which will allow them to read/write/delete a file that is already there) and give the student group the base level (what you have already) and create files/ folders - this should allow them to create the initial file and then as creator owner they will permission to do everything else

    HTH

  3. #3

    Join Date
    Nov 2011
    Location
    Winchester
    Posts
    22
    Thank Post
    1
    Thanked 2 Times in 2 Posts
    Rep Power
    7
    This is what I thought, it just dosn't seem to work.

  4. #4

    Join Date
    Nov 2011
    Location
    Winchester
    Posts
    22
    Thank Post
    1
    Thanked 2 Times in 2 Posts
    Rep Power
    7
    I don't think the CREATE OWNER does what it sound like. I was doing some reading and it's normally used in AD for controlling objects.

  5. #5
    sister_annex's Avatar
    Join Date
    Jan 2009
    Location
    Wolverhampton
    Posts
    616
    Thank Post
    103
    Thanked 144 Times in 125 Posts
    Rep Power
    52
    OOPS my bad - I'll have another think

  6. #6


    Join Date
    Oct 2006
    Posts
    3,414
    Thank Post
    184
    Thanked 356 Times in 285 Posts
    Rep Power
    149
    Its basically the same as when you set up folder redirection. Follow this guide (minus the share permissions and redirection buit) but add any extra permission you may need.

    Best Practice: Roaming Profiles and Folder Redirection (a.k.a. User State Virtualization)

  7. #7

    Join Date
    Nov 2011
    Location
    Winchester
    Posts
    22
    Thank Post
    1
    Thanked 2 Times in 2 Posts
    Rep Power
    7
    The reason this link works is when you are in AD and add the user, AD will create the home folder for the user. This folder is given the permission of the account created. This cannot be done in this scenario.

  8. #8


    Join Date
    Oct 2006
    Posts
    3,414
    Thank Post
    184
    Thanked 356 Times in 285 Posts
    Rep Power
    149
    Quote Originally Posted by kv102t View Post
    The reason this link works is when you are in AD and add the user, AD will create the home folder for the user. This folder is given the permission of the account created. This cannot be done in this scenario.
    All you do is on the root folder remove append and delete rights from the pupils security group. They can then create as many files as they like and as creator owner they can modify and delete them, but they can't modify or delete anyone elses.
    Last edited by j17sparky; 2nd March 2012 at 07:39 PM.

  9. #9

    Join Date
    Nov 2011
    Location
    Winchester
    Posts
    22
    Thank Post
    1
    Thanked 2 Times in 2 Posts
    Rep Power
    7
    Thanks for the info, I will try this today.

  10. #10


    Join Date
    Mar 2009
    Location
    Leeds
    Posts
    7,059
    Thank Post
    232
    Thanked 926 Times in 795 Posts
    Rep Power
    309
    creator owner will work IF the folders exist and are created by the user (or they are assigned as the owner) creator owner cant create files in a new share as say fred/john/dave isnt the creator owner. If you add pupils group the permission for THIS FOLDER ONLY to create folders you should be ok

  11. #11

    Join Date
    Nov 2011
    Location
    Winchester
    Posts
    22
    Thank Post
    1
    Thanked 2 Times in 2 Posts
    Rep Power
    7
    i wanted to avoid the creating folder for each. If i did this then you wouldn't need create owner as their permission would give them all the security they need.

  12. #12

    Join Date
    Nov 2011
    Location
    Winchester
    Posts
    22
    Thank Post
    1
    Thanked 2 Times in 2 Posts
    Rep Power
    7
    Quote Originally Posted by j17sparky View Post
    All you do is on the root folder remove append and delete rights from the pupils security group. They can then create as many files as they like and as creator owner they can modify and delete them, but they can't modify or delete anyone elses.
    This was the bit that make it work.

    All working now, thanks for everyones help.



SHARE:
+ Post New Thread

Similar Threads

  1. GTK restrict drives and NTFS permissions
    By CyberNerd in forum Thin Client and Virtual Machines
    Replies: 2
    Last Post: 11th May 2007, 06:32 PM
  2. Replies: 4
    Last Post: 25th April 2007, 12:22 PM
  3. Mass setting NTFS permissions
    By localzuk in forum Windows
    Replies: 7
    Last Post: 8th January 2007, 05:23 PM
  4. Replies: 4
    Last Post: 23rd November 2006, 10:33 PM
  5. Replies: 4
    Last Post: 21st June 2006, 06:21 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •