Windows Thread, NTFS Permissions problem in Technical; I'm in need of some advice on an NTFS permissions problem we are experiencing. Basically the ICT teachers require access ...
17th November 2009, 10:37 PM #1
- Rep Power
NTFS Permissions problem
I'm in need of some advice on an NTFS permissions problem we are experiencing. Basically the ICT teachers require access to all the students home folders to mark the students work. This involves them modifying some of student powerpoint files which are used as an eportfolio. I created a security group called Student Administrators and added the teachers as members. This group now has permissions to modify files within the student folders ensuring that on the advanced special permissions the take ownership attribute is deselected.
When the student files are accesseed by the teachers things are fine up until they make changes and save the file, they then become the owner of the file and the student is unable to access his file that he originally created. I presumed this was just a permissions problem but at present we are unable to see what is wrong.
Any hints or pointers would be much appreciated as its driving us mad at present not to mention the teachers involved.
17th November 2009, 11:18 PM #2
Not entirely sure what you're doing wrong (need to think on it), but I am very concerned that teachers are modifying course work... I think exam boards will take a dim view of this.
18th November 2009, 12:17 AM #3
You need to remove CREATOR OWNER from the ACL under the Security tab properties of a folder.
18th November 2009, 09:48 AM #4
- Rep Power
Pause for thought on that one !!!
The teachers are only modifing an ePortfolio index page which is used by the moderator to access all the students course work. By adding comments at the end the students get feedback on what they need to change to imrove their marks. thats the theory anyway.
18th November 2009, 09:51 AM #5
- Rep Power
If we remove the creator owner from the ACL won't that remove the students rights for access to their own files that they have created.
18th November 2009, 10:14 AM #6
Usually you shouldn't/wouldn't need the Creator Owner ACL if the user has full access to their My Documents (which they should have). I run a similar system to what you describe (staff accessing user areas) and I have removed Creator Owner. Staff should just have Modify rights.
18th November 2009, 10:15 AM #7
not if the student explicitly has full control over the folder and all contents. New documents created in that folder should get their ACL's from the parent folder which lists the student as having full control.
Originally Posted by mickeyh080
18th November 2009, 10:27 AM #8
We operate the same system too, only the Domain Admins get full control, the Teachers and the student just get Read, Write, Erase, Create, Modify.
Although IIRC the owner of a file gets full control unless permissions have been specifically denied.
By pnlrogue1 in forum Windows Server 2000/2003
Last Post: 5th July 2011, 12:34 PM
By techyphil in forum MIS Systems
Last Post: 1st March 2010, 01:54 PM
By FN-GM in forum Scripts
Last Post: 20th March 2009, 12:03 PM
By kennysarmy in forum Windows
Last Post: 7th February 2008, 03:29 PM
By cookie_monster in forum Windows
Last Post: 6th February 2008, 09:24 AM
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)