|
Posted by Roger Abell [MVP] on September 12, 2006, 10:20 pm
Please log in for more thread options understood, but still . . . (below)
> Unfortunately, sometimes the access is so specific that it makes using
> groups even more difficult to manage than just giving the user the access.
There is a short term and a long term cost/benefit to consider.
What you say is true if one overlooks the long term.
> Also, the keepers / accumulators of the data often do not realize the
> reprecussions of their haphazard folder making and create the problem that
> I need to accomidate.
>
Folders can be defined for their sharing needs such that they cannot change
the accesses on them. Now, being creator, and hence owner of what they
add does allow them to grant other than intended. First, this is capped by
use of effective share level permissions so that in fact they could only set
NTFS permissions that are subsets of the share level and have their changed
permissions effective as intended. If you set the permissions to meet the
intended/needed sharing, and defined a template for those permissions, and
periodically analyzed with the template, then: 1) you would see whatever is
altered from the intended, 2) you could provide areas for those new uses,
and 3) you could apply the template to put things back as intended (enough
of this and the users discover that they need to get an area defined for the
differing usage).
Storage administration is not always easy, and at times you must decide
to either be hard and hold a line, or to give up and deal with chaos.
>> In the future consider use of groups that are well named to reflect
>> where they are used to grant access, and what access. Then,
>> your current issue is one of merely finding in what groups the
>> account holds membership, which is simple to do.
>>
>>> There are some folders on the network that some users have been given
>>> specific access. The users are no longer here and I need to find the
>>> folders where their name was specifically given access. Is there a
>>> script
>>> or something that I can use to find folders with their specifically
>>> named
>>> access?
>>>
>>>
>>>
>>
>>
>>
>
>
| 
XML Sitemap