partition/share/folder permissions - again

[s1mon321]

Anybody fancy offering some advice on the best settings for this scenario?

 

Have joined this school and some very strange permissions in operation!!

 

We have a server with a partition, within that partition are three shares

 

One for general staff/department files and folders

One for students to access resources added by staff

One for students to save files for submission to staff

 

Weird thing is that there is read/execute permission granted to the domain users group on the partition level security!? Surely that isn't right? This also propagates right the way down to the share NTFS permissions and beyond.

 

How would you guys configure the permissions?

 

Any advice would be appreciated

[Hightower]

I would personally have all shares set to 'Everyone Full Control', and then do the wittling out with NTFS permissions on the folder level.

 

Students shouldn't have any access to the staff drive, only read access to the resources drive, and write access over the submission drive. Staff wouldn't hurt having write access to all three.

[s1mon321]

Cheers for your reply Hightower. Do you think that permissions should be set at the Partition level though?? I thought that Share Perms, followed by NTFS would suffice but don't want to remove the Partition perms for risk of messing things up.....