Theldron Posted January 14, 2019 Posted January 14, 2019 Hello, I am currently setting up a new file server, well not new, but newer than our current one. Has anyone got any recommendations or best practice for setting up the file server? I want to ensure that this gives the best setup for the school, past file servers have been setup in a rush and through google. I actually have time to get it right this time. Much appreciated.
Duke5A Posted January 14, 2019 Posted January 14, 2019 (edited) Control permissions exclusively at the file level Remove 'server\users' from the allowed list as this will let anyone have read access Don't give anyone full control, not even over their own home folders - only give modify permissions as they'll be able to mess with permissions having full Disable permission inheritance at the top level One last bit of advice is to go easy on the number of share names. Don't create a new share for every home folder on the server, but a single top level one. - Top Level Folder (shared here named staff$, disable inheritance) +Teacher A +Teacher B +Teacher C Control the user permissions on the teacher folder level and map by '\\server\staff$\teacher a', etc, etc Edited January 14, 2019 by Duke5A
MatthewL Posted January 14, 2019 Posted January 14, 2019 Use groups to control access to folders rather than assigning individual users, this can be controlled form within AD then you can also see who has access to what quite easily. We used to have just 2 shares for data, one been Shared Data and other been user home directories. Within Data would be departments, enabled anyone who needed access to do it from one common place rather than mapping different shares for different things. We did create a separate systems share with folders under for any systems that needed to host data as such on the server. Just had a look back at some notes and this is how we set the permissions: Group Share Folder Security Admins – Full Control Users – This folder only – Traverse folder / list folder / read attributries / read extended atributries Share Security Domain Admins – Full Control Domain Users - Change Home Drive Folder Security Admins – Full Control IT – Modify Users – Same as above Share Domain Admins – Full Users - Change
Theldron Posted January 15, 2019 Author Posted January 15, 2019 Make sure it's a virtual Server. Got a physical file server.
Sonic007 Posted January 15, 2019 Posted January 15, 2019 Got a physical file server. Ok, The only reason I say this is that it will be easier to restore if disaster happens.
LTurner3692 Posted January 15, 2019 Posted January 15, 2019 You should still be able to make a virtual one on it?
Theldron Posted January 15, 2019 Author Posted January 15, 2019 You should still be able to make a virtual one on it? Is it possible to backup a VM file server even without something like Veeam? As its expensive and we have Backup Exec 16 for the normal file server backups.
LTurner3692 Posted January 15, 2019 Posted January 15, 2019 As far as i am aware yes, we used DPM for a while and had it backing up drives and the whole VM! you might need to dig into your back ups to find out how well it does it!
Sonic007 Posted January 15, 2019 Posted January 15, 2019 Or you can just use Windows Server Backup which is free and built in.
AlanD Posted January 15, 2019 Posted January 15, 2019 Or you can just use Windows Server Backup which is free and built in. Yes, and it far too often overlooked. Some schools spend a relative fortune on cloud or other backup services...often with massive limitations on the size of backups and historical archives. 1
TwistedHelixis Posted January 15, 2019 Posted January 15, 2019 Is it possible to backup a VM file server even without something like Veeam? Another vote for MS built in backup. Its actually really good for backing up VMs. Another vote for going virtual and creating a VM. If you dont do this you will regret it at some point. As for your initial question - Also make sure to use more than one network cable and team them together for faster throughput.
DGardiner Posted January 15, 2019 Posted January 15, 2019 Another vote for MS built in backup. Its actually really good for backing up VMs. Another vote for going virtual and creating a VM. If you dont do this you will regret it at some point. As for your initial question - Also make sure to use more than one network cable and team them together for faster throughput. sign me up for the regret list. Id also enable Deduplication and access based enumeration on the share
LTurner3692 Posted January 15, 2019 Posted January 15, 2019 +1 on the Deduplication! saves you so much space!
maark Posted January 15, 2019 Posted January 15, 2019 deduplication will save you space then you can setup shadow copies if you have enough free - great for easy restore of files especially when someone overwrites with a blank file. Also quota management and fsm to block dodgy filetypes.
MS2011 Posted January 15, 2019 Posted January 15, 2019 Is it possible to backup a VM file server even without something like Veeam? As its expensive and we have Backup Exec 16 for the normal file server backups. We have a physical file server. I want to replicate that file server into a VM on prem or azure. Any advice?
DJ-1701 Posted January 15, 2019 Posted January 15, 2019 Is it possible to backup a VM file server even without something like Veeam? As its expensive and we have Backup Exec 16 for the normal file server backups. You can use the free version of Veeam Backup and Replication, and schedule backups using powershell. https://www.veeam.com/blog/veeam-backup-free-edition-now-with-powershell.html Or, as I do, you can just use the free Veeam agent on a physical or virtual machine for backing up. (Note: This won't let you store the image in a central Veeam Backup and Replication unless you pay for that service, but does store as an image for free.) https://www.veeam.com/windows-cloud-server-backup-agent.html
Jawloms Posted January 15, 2019 Posted January 15, 2019 You can use the free version of Veeam Backup and Replication, and schedule backups using powershell. https://www.veeam.com/blog/veeam-backup-free-edition-now-with-powershell.html This is what I do. It works very well, and it's free! 1
NISMO1968 Posted January 24, 2019 Posted January 24, 2019 Enable virtualization (Hyper-V role, KVM etc), virtualize your workload and use Veeam. Azure SRM is another option but it's more expensive one as well. We have a physical file server. I want to replicate that file server into a VM on prem or azure. Any advice?
theeggmaster Posted January 24, 2019 Posted January 24, 2019 We've just moved our file server from having physical storage to being contained within the file server VM using disk2vhd. Worked brilliantly for both home drives and our shared drive.
Arthur Posted January 24, 2019 Posted January 24, 2019 You can use the free version of Veeam Backup and Replication, and schedule backups using powershell. https://www.veeam.com/blog/veeam-backup-free-edition-now-with-powershell.html Btw, Veeam Backup Free Edition was discontinued a few days ago. It's replacement is Veeam Backup & Replication Community Edition*. * Veeam haven't yet updated their website with the new name. 2
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now