Search the Community

Hi I'm going to go straight to the point, Now I've been aware of this problem for a while but surely there must be a way round it!!! but how I can set file permissions on multiple files / folders at one time. I have got to re organise a few shared folders with different permissions but I don't fancy spending hours on it when I know it can be done within minutes. I know I could do this with Windows server 2003 but since the release of 2008 they removed this. does anyone know how to get the security tab back when you highlight multiple folders or a program that will do the same job?? thanks

Hi all, I have recently been tasked with creating an all new Exam system for our College. I have set this up with Exam Users' Documents being redirected via Folder Redirection to a Shared documents area per exam account type but am running into an issue. The issue I am having is that I have configured the NTFS permissions on the Root folder where the Documents are stored (in a share) so that "CREATOR OWNER" gets Full Control to Subfolders and Files which works absolutely fine when the users log in and create their work in the exam etc. The issue arises when the Exam Managers need to drop an Exam paper into the Documents area of the Exam Users Account, the Exam Managers can put this file in but the file does not inherit any permissions for the Exam User to be able to open/access it. A blanket fix would be to apply a "Exam Takers GROUP" NTFS permission to the root folder but this could potentially give ExamUser001 access to ExamUser002's documents and this cannot be permitted. Does anyone else have a possible solution to this? Manually assigning NTFS permissions for each Users Documents folder (e.g: Giving Full Control to "ExamUser001" to "ExamUser001") is not an option as we have around 1000 accounts with this issue and this would require way too much time to complete. Any advice would be much appreciated! Thanks, Alex

I am migrating staff file servers and want to make sure that I get the NTFS permissions right first time as I have experienced in the past that it can be very messy and difficult to fix it later. The file server will host Home folders, shared folders, profiles, desktops, downloads and settings(for redirected favorites, links, searches and start menu) and will be located in the main folder ‘Staff’. These are shared and mapped via active directory using DFS paths. So the UNCs look like this: \\Domain\Staff\HomeFolders\%username%\ \\Domain\Staff\DesktopFolders\%username%\ \\Domain\Staff\DownloadsFolders\%username%\ \\Domain\Staff\Settings\%username%\ \\Domain\Staff\Profiles\%username%\ \\Domain\Staff\SharedFolders\ This is what I am trying to achieve: First of all, I would like to make the desktop folder read only so no one can save to the desktop. I would like to prevent all the users from changing the permissions and sharing the folders if folders if possible. The users should not be able to take ownership either. Not sure if there is any way to do this but I would also like to prevent them from putting the files directly in their home folders. I have created folders under SharedFolders for different departments and would like to prevent users from modifying the names of these or creating new folders in SharedFolders. The documents folder and settings will be redirected so I need to know the permissions for these parent folders. I have created a spreadsheet detailing all the folders, groups and permissions which I am sharing here. https://docs.google.com/spreadsheets/d/1K4PrCLboDcVKhnfKiWbvypExGQVcgjT6K9EBRAv6gHc/edit?usp=sharing Also, do I need to go to advanced permissions to achieve this or the six standard permissions will work fine? Moreover, should I be creating new ACL groups as per MS recommendations or the existing groups should serve the purpose? I am having hard time trying to work out what NTFS permissions I need to assign to which groups for different types of folders. I will really appreciate if people can assist me with these. I am open to all suggestions and would like to know if there are any other recommendations to avoid any problems later.

When doing an audit of our network last night, I found some stuff in all users startup on some computers that shouldn't have been there and realised that one of our group policies is giving all client computers (windows XP and windows 7) what amounts to full read/write/modify/execute NTFS permissions for "everyone" on all local drives. While the C: drive is hidden via GPO, this obviously is merely obscurity. How does everyone else set their permissions for local drives? I was wondering what settings others had in this GPO so I have something to refer to when changing these? I want to lock it down as far as possible without breaking anything (I know that the permissions required will vary slightly from network to network, but I'm looking for something to start off with). Cheers

Hey guys, I work at a variety of primary schools which of course have a pupil shared area where staff can put stuff so the pupils can read/save to their hdd etc. Now the problem I'm having, which I am sure is common, is that kids, they love to click and drag don't they! They just love it! As a result obviously We find that folders go missing and eventually are found in other folders. The question I am asking is what, in your opinions, would you say the best set of NTFS permissions would be for a Pupil shared are. They will need the ability to obviously read and write to the area, the ability to rename their work if they mis-spelt something. But I want to restrict them being able to move and play with the folder structure I want no more "accidental" click and drags. I know that by restricting them to delete a file would result in them being unable to move a file (as apparently in Microsoft's eyes thats the same thing), but what if it's one of their own files. What if they honestly saved it to the wrong folder and need to move it to an alternative. What are your opinions. What combinations do you use? I'm interested. If I can get a perfect combination I'm more than likely going to turn that to a standard throughout my schools. Obviously there is no "perfect method", schools require different things, but ideas would be interesting. Thanks!