+ Post New Thread
Results 1 to 4 of 4
Windows Server 2008 Thread, NTFS Permissions in Technical; Hi, Inherited a network and am trying to make some minor improvements in the short term... I am having a ...
  1. #1
    lafleur1977's Avatar
    Join Date
    May 2009
    Location
    Lancashire
    Posts
    171
    Thank Post
    128
    Thanked 4 Times in 4 Posts
    Rep Power
    12

    NTFS Permissions

    Hi,

    Inherited a network and am trying to make some minor improvements in the short term...

    I am having a problem with restricting staff members access to students home directories. It is currently setup in the following way:

    Home directories (shared - everyone - full control)
    2006 > users home directories
    2007 > users home directories
    2008 > users home directories
    2009 > users home directories
    2010 > users home directories
    Teachers > users home directories

    I want to allow staff members to only read data in the 200# directories but be able to read & write in the users home directories. The trouble is the home directories share currently has students and teachers together so I can't change the permissions at that level. Currently each 200# directory has a staff security group with modify permissions. I changed this to a special permission (subfolders and files only) but this stopped staff from being able to access the 200# directories.

    I hope I have made this clear. Thanks for any help.

  2. #2

    Join Date
    Feb 2011
    Location
    Australia
    Posts
    109
    Thank Post
    0
    Thanked 10 Times in 10 Posts
    Rep Power
    9
    For starters - Everyone should not have FULL CONTROL over any directory, at most it should be R/W/M.

    Do you have groups split as 'Teachers' and 'Students' ?

  3. #3
    Jamo's Avatar
    Join Date
    Jan 2009
    Posts
    1,365
    Thank Post
    66
    Thanked 178 Times in 150 Posts
    Rep Power
    62
    You can apply the permission read only for the student folder view to This folder only (im guessing you would have to do this at each year group level) and it will not propagate through the sub directories. Combined with the security permission you have already described (subfolders and files only) should give you the result you are looking for.

    It should also be said that this assumes that the share permissions on the drive are set up so that everyone has full control (share permissions are much less finely grained so allowing full control here doesn't affect the finer control of NTFS).

    Giving people full control over their home directories basically lets them 'take ownership' of files inside those directories. Are there any security risks for this? As they will almost always be owners of 95% of the files in their directories anyway?

  4. #4
    lafleur1977's Avatar
    Join Date
    May 2009
    Location
    Lancashire
    Posts
    171
    Thank Post
    128
    Thanked 4 Times in 4 Posts
    Rep Power
    12
    TheMinster: I agree about the everyone group fully.I would always use a custom security group or authenticated users however I am still figuring out this network so do not want to change too much. Ultimately I think the file server needs to be changed from what I have seen so far - its a mess with questionable permissions and file duplication. Also yes security groups are setup for students and teachers.

    Jamo: That sounds great but would I be able to do this with the same security group or would there have to be 2 different ones as I would be setting different permissions at the same level e.g. each year group.

    Thanks for both your replies.



SHARE:
+ Post New Thread

Similar Threads

  1. NTFS permissions keep getting lost.
    By andyturpie in forum Windows Server 2000/2003
    Replies: 11
    Last Post: 16th June 2010, 12:03 PM
  2. ntfs permissions
    By duxbuz in forum Windows Server 2008
    Replies: 1
    Last Post: 26th March 2010, 04:43 PM
  3. SIMS NTFS Permissions?
    By techyphil in forum MIS Systems
    Replies: 29
    Last Post: 1st March 2010, 01:54 PM
  4. C: drive NTFS permissions?
    By cookie_monster in forum Windows
    Replies: 4
    Last Post: 6th February 2008, 09:24 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •