Search the Community
Showing results for tags 'permissions'.
-
Hi all, I’m doing a bit of fact-finding and would really appreciate hearing how other schools are managing their staff shared drives. In particular, I’m interested in how you handle structure and permissions. For example: Do you allow staff to create folders at the root of the shared drive, or is that locked down? Do you enforce a standard folder structure (e.g. by department like Science, English, Maths), or let departments/staff organise things themselves? Who typically manages the content and structure within departments – IT, HoDs, or someone else? How are you handling permissions – open access within departments, or more granular (read/write/restricted areas)? Have you found a good balance between keeping things tidy vs giving staff flexibility? I’m reviewing our current setup and trying to decide whether to move towards a more controlled, structured approach or keep things a bit more flexible. Would be great to hear what’s working well for you (and equally anything you’ve tried that didn’t go so well!). Thanks in advance 👍 -
Hi all, we had an issue with Office loading incorrectly on one of our machines our receptionist uses. I tried everything you could try and ended up rebuilding the machine as it was clearly not well. This fixed the issue with Office loading incorrectly but now after we logged the same person back into Office they now don't have the option to share there calendar to anyone else even though they could before the rebuild. Things that I have checked and tried: Right clicked on the callender in outlook and checked permissions Signed into office administrator account and checked the permissions on the calender email address Signed into the calender account and did the same All of these things where or are now correct and I still have greyed out options for share calender, publish online and calender permissions in outlook for our receptionist. Any ideas? Thanks
-
Hi, I have a SP site which is setup to authenticate with an external two-way trust domain. I've used the stsadm tool to configure the people-picker to browse this domain and add users/groups to this site. For the most part authentication works fine but have a select few (not disabled) which just can't login. The check permissions tool says that have the desired relevant access but the login prompt just keeps re-appearing. Here's where it gets stranger. Sometimes my own trusted domain account takes three attempts to login before this is accepted whereas others are allowed in straight away! Are there any logs for troubleshooting login at all? I'm struggling to find these. What could be the problem? I'd be happier if this just didn't work across the board to make troubleshooting a bit easier but then this job would be easy wouldn't it Any advice much appreciated.
-
Hi, I've been using GameMaker-Studio here installed on a network shared drive for some time now. Running it like this requires permissions to be set on 'C:\ProgramData\GameMake-Studio' (modify for everyone or a specific group if preferred). This has been working fine up until recently upgrading to version 1.4.x. Now when running this I get the message: As mentioned, the permissions have been set appropriately and have double-checked this. I have noticed that the path in the error appears to missing the "GameMaker-Studio" dir and instead uses "" but don't know whether this is simply to shorten the path for the message! The GUID folder mentioned does exist in the full path so am inclined to think this is the case. Annoyingly this works fine for a domain admin so pretty sure it's a permissions-based issue. I have monitored the C drive for any activity and have noticed that the file "c:\Windows\Prefetch\GAMEMAKER-STUDIO.EXE-A2CB424E.pf" is modified and this only had permissions for the local administrators group but unfortunately didn't appear to make a difference.....Thought I was onto something there! Any ideas? -
when staff accounts goto wordle.net/create and then press "create" this then loads java and works fine. however when a student account goes to wordle.net/create and then presses create nothing happens!. im guessing its a problem with java but im unsure where to start with it. any advice or soltuons would be great we are using IE8 thanks, ITHelp. -
Hi all, Have a query with regards to printer security permissions on our 2003 domain... I have a printer that I need to deny access to. Basically kids printing to it from other areas of the school (should only be the computers in that room that can print to it). This is what I've done: added computer accounts that shouldn't print to it to a security group. Added that security group to the printer, with a deny 'print' tick box. However, I was still able to add the printer and print to it from one of those PCs! Where am I going wrong? Thanks!
-
Morning all! We are experiencing some issues with shared calendars in Exchange, in that all members of staff are able to view and edit any other staff member's Outlook calendar. It seems that setting permissions for individual users or keeping the standard 'Default: None, Anonymous: None' doesn't seem to have any effect! We are using Exchange 2003 on Server 2003 and users have Windows XP Pro with Outlook 2003. I've had a look at the security permissions on the Mailbox Store in Exchange System Manager and noticed that there are two entries which might have an effect; Domain Admins and Enterprise Admins. The profiles of staff users are not members of either group, however the Staff Organisational Unit folder does have 'Domain Admins' and 'Enterprise Admins' entries under the security tab, both of which have full access rights. Is this a possible reason as to why staff can freely edit other staff user's calendars without the need for permissions? Am I right in thinking if I remove 'Domain Admins' and 'Enterprise Admins' from the staff 'OU' folder, this shouldn't have an effect on staff accessing their e-mails? Any suggestions are hugely appreciated!
-
Dear all, I don't know if someone could shed some light on this for me or what I am doing wrong, I have a folder structure set up as follows: Top Level e.g. H: Drive THEN Folder e.g. Home Directories THEN Sub Folder(s) e.g. Staff, Students, Parents THEN Sub Folders(s) e.g. various specific accounts under the folders above. How do I set the security permissions so that users can navigate their folders and have Read Write and Modify, but hide the folder structure above and also deny access to them. ** So ideally all users would see is their own folder, and have access only to their own folder. ** Any help would be greatly appreciated. Kind Regards.
-
We have Sanako Study 1200 and are starting to use more adn more of the functions. There is an option for the teacher to collect the files the students are working on. For this I understand that there needs to be a share on the network where students have write permissions. To minimise abuse I'm going to make it a hidden share but I'd also like to stop them listing the files/reading files from the share so they don't start dumping thousands of mp3s in there to share. Does anyone have any ideas on this? My thoughts are to give them read permissions and write but not read and execute or list folder contents. The client is set to save files to a UNC path set in the tutor software on the tutors PC. Teachers then copy these files out. To keep it tidy I could wipe the data out every night. Any ideas? Anyone done anything like this? ChrisJ
-
Hi I'm trying to set a permission on a registry key for a program that requires to write where the database is held I've been told that REGINI.exe does this, but seems to complex, can some one help me write a simple logon script that will set the USERS group to full permission on a registry key upon computer bootup, i will use this script in a GPO Computer Start up Script I've tried Registry GPO under "Computer\Windows Setting\Security Settings\Registry" and doesn't work, the key is held under "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\RisingStars\Assessments" Hope some one can help!
-
Hi all, Very new to Powershell (today, in fact!) and having some trouble with a script I'm working on. Now, I do know that I could have had this done manually in a much shorter time - but where's the fun in that? The Problem I have a directory, inside which is a load of other folders. The staff member needs to have Read&Execute access to the root directory (to view the folders that they can access), and specific folders, but no access to the others. The root directory is a shared folder. What I have so far: ### The root directory containing all of the folders $directory = Get-ChildItem "D:\" ### @edugeek: Not sure if this needs to be their logon name? ################# $username = "USERNAME" ### The permissions to apply to this user $permissionsToApply = "ReadAndExecute" ### The list of folders that the user needs specific access to, comma separated $foldersToBeGivenPermissions = "TestFolder" ### DO NOT MODIFY BELOW THIS LINE $accessRule = New-Object system.security.accesscontrol.filesystemaccessrule($username, $permissionsToApply, "None", "None", "Allow") foreach ($folder in $directory) { $foldername = $folder.name switch ($foldersToBeGivenPermissions) { $foldername {$accessRule} } } However nothing seems to change when I run this. Obviously I'm running it on my machine locally first to test it. My question is: Does the $username need to be something different, or will it take the user's Active Directory login name? Do I need to put the domain in there also? Am I missing something else crucial? Many thanks to any and all kind folks out there who can help me out -
A bit of a weird one here. I work for a school in Sussex in we had a big migration over to Bromcom about a year and a bit ago. We have a new Finance member who has joined and she requires access to our old FMS Server for some financial info. I have logged into FMS with our old admin account and it looks like I have somehow lost admin rights. I cannot edit any users or any access levels. I can even log into the "sysman" account and this doesn't have the correct permissions either. Any idea how I could reinstate these permissions or what could be causing this? All options under users are greyed out other than reset password when I click on my own account. Thanks!
-
Hello Guys, Really after some help / advice with deploying Adobe Creative cloud on a CC4 network. I have created the packages using the Adobe Creative Cloud Packager tool, and imported them into the RMMC. The software itself installs successfully on the machines, however it only seems to work for around 7 days running in trial mode, and doesn't automatically activate the licence. Some machines work fine, but others don't. Also, sometimes we are getting "Please uninstall and reinstall the product, error 16" when Students launch the Adobe Programs. I have rang RM this morning asking if they do an integration pack for Adobe Creative Cloud, just awaiting their response. Many Thanks James -
Hello, We've suddenly encountered an error in FMS which says the following: Unknown table type. Permission denied. File C:\PDOXUSRS.NET Anyone know why this has happened and how to fix it please? Cheers
-
Is it possible to see which users on a network have accessed a word document/PDF file on a shared drive? Or is there some VB code that would provide similar? Many thanks
-
Hello, Think this is the correct place for this to go as I believe it to be an issue with permissions or a gpo. We have a few user types, students, staff and system admins. When a student user goes to open a .html file (or any similar, .htm ect) the page, instead of loading, just redirects the browser to the users home page. I have done some testing, removed all policies from the user and the issue still remains, so I believe this to be a problem with the file server permissions for the user area. I have checked that and everything matches the staff users file permissions from the root of the server to the file location. Any user above student can open a .html file with out any issues. It just seems to be with the student accounts. Would anyone have any idea what the cause of this could be, Im running out of ideas here?! Thanks, Joe
-
Hi all, have recently installed HAP + V10 Full on a server 2012 r2, installed iis as videos instructed (from HAP website) have linked to domain and can now log in with domain users. currently domain admins are set to be able to see the Management tile when they log in but they don't! the only way i can get to the setup.aspx page is by changing the web.config to have when i change that section to: no one can access the setup.aspx and the managent section does not show. this is even the case when the network administrator account logs in to, which is in the domain admins group..... any one have any ideas???
-
Hi all, I've been asked to give teachers write permission to student home directories. At the moment they have read-only access via a mapped users share. I don't want to give them standard modify rights, because this could allow them to drag student folders into one another, or be able to delete a student root folder, causing all sorts of issues. There are also several folders under each user e.g My Documents, Favourites etc that need to remain for the student to be able to logon. What special permission options would be needed to allow them to only modify child files, and is a cacls batch file still the best way to set them all up? Thanks for your assistance.
-
Greeting everyone! I am hoping someone in this forum may be able to assist with my file sharing setup... How can I get this accompish: FolderA - I have everyone with read only and admins as full control in "Share Permission" under the share tab. This works for me as I do not require users to create folders below this folder. I have sub folders called: -SubFolderA - I would like for all users to be able to create files and folders in SubFolderA -Users - User can only access thier personal folder within this subfolder. I have all the above setup as follows: FolderA - Share permissions ; Admins F\C & everyone R SubFolderA - on the security tab, I have removed all groups and given F/C to admins and Modify to SubFolderA group Users - Admins F/C and users F/C of their own user folder. Issue here is that, users aren't able to create files and folder with this setup unless if I set FolderA share permission to modify for everyone. How can I accomplish this given the above details. Any suggestions is greatly appreciated. Thanks in advance, Hamid
-
We are running Moodle 1.9.8 on Windows Server 2008 R2 using a mysql db. We're having an issue where teachers upload images via the html text editor and it will upload fine, however the file doesn't get the permissions it should in order for other users to view it. The permissions are correct on the parent directory, and the file itself says its inheriting, but it gets a completely different set of permissions until you either untick-re-tick inheritance, or tell the parent directory to reapply permissions to child files/folders... If you create a file in the directory via notepad or whatever, it gets the permissions properly, so it seems to be something relating to moodle applying them when it creates?
-
Hi, I am using Fronter with our own room structure (as opposed to SIMS import) and it was all working fine until a couple of days ago. Now some staff are getting an error message 'you do not have read access in this room) when the try to access the room from the entrance hall. I know it's a permissions thing, but i have given the pertinent staff groups 'room owner' permissions (I think!). Help - I'm confused! many thanks in anticipation.
-
Hi, One of our users recently encountered an error in logging onto the domain. It says that on the profile path there is a .V2 folder that cannot be copied. I've logged onto our server, found it in the profile folder and tried to delete it...no go. Logged on as administrator it says 'access denied' and also I cannot alter any security settings on it or anything. What the heck is it??? Hope you can help!!
-
Hello! I am doing some research on the use of FreeNAS in my establishment. We currently are storage short! The servers we currently have are small in terms of storage space and a NAS would be extremely useful. I need a solution which is reliable and usable on an RM CC3 system. How do you use FreeNAS? Do you just map the drive to a share with anon permissions or use local or AD authentication? Have you come across any problems using the system? I have tried to use OpenFiler but have found the interface less than appealing and couldn't for the life of me get it to connect to my test server at home whereas I managed to join FreeNAS to the domain no problem! Thanks for any help you guys can provide.
-
Hi Everyone. We have just gone live with BromCom today and I am trying to configure permissions for all our staff before the kids come in tomorrow. Most things seem to have a role available but there is nothing for SENCO... which surprised me slightly. Support said they don't have any guidance beyond the how to make your own roles. Can anyone here tell me what roles they have assigned to their SENCO as a starting point? Thanks.
-
Hello I have a file server on 2012 r2 which needs to be upgraded so I decided to attach the storage drive to a 2016 server and re setup the GPOs and shares on the network. Unfortunately for some reason when you a user goes into their own network share (\\fileserver\staffhome\%USERNAME%) they are unable to rename files already created before it was moved. The error comes up "An unexpected error is keeping you from renaming the file. If you continue to receive this error, you can use the error code to search for help with his problem. Error 0x80070780: The file cannot be accessed by the system" Am I missing something? Thanks
