Folder and Files Security

microsoft.public.windows.server.security - Supporting MS Windows network? Read here before it's too late! 

Subject Author Date Folder and Files Security fanman36 10-03-2006  RE: Folder and Files Security ste 10-03-2006  RE: Folder and Files Security fan 10-03-2006  RE: Folder and Files Security ste 10-03-2006  RE: Folder and Files Security fan 10-03-2006

Posted by fanman36 on October 3, 2006, 1:46 pm Please log in for more thread options I an issues where for years my company execs stores private company information on the public drive. I tried changing the permission on indivdual folders to keep other from access, but it caused refused access for all users. I moved the information from the public folder and created a new folder at the root and created the appropriate permission and this seems to work. Now i must give my company executives access to this information. What would be the best possible way to do this without having to change or create a different login scipts. Posted by steve_t on October 3, 2006, 3:01 pm Please log in for more thread options Assuming you're storing the data on an NTFS-formatted drive, giving the executives access should simply be a matter of adding their accounts (or, preferably, a group of which each is a member) to the Access Control List (ACL) in the Security tab of the folder's Properties and giving them appropriate permissions. Keep in mind that you don't usually need to use the Deny option - it's used to make exceptions for a member of a group that has access, but for some reason, that specific member should not have access. https://www.microsoft.com/windows2000/en/advanced/help/default.asp?url=/windows2000/en/advanced/help/acl_set_permissions.htm If they are going to be making changes to the data in that folder, including adding new files, you'll also have to make sure their share permissions are set to at least Modify. Hope this helps. Steve "fanman36" wrote: show/hide quoted text > I an issues where for years my company execs stores private company > information on the public drive. I tried changing the permission on indivdual > folders to keep other from access, but it caused refused access for all > users. I moved the information from the public folder and created a new > folder at the root and created the appropriate permission and this seems to > work. Now i must give my company executives access to this information. What > would be the best possible way to do this without having to change or create > a different login scipts. Posted by fanman36 on October 3, 2006, 3:08 pm Please log in for more thread options will i still have to create a login script to map the new folder to their computers? "steve_t" wrote: show/hide quoted text > Assuming you're storing the data on an NTFS-formatted drive, giving the > executives access should simply be a matter of adding their accounts (or, > preferably, a group of which each is a member) to the Access Control List > (ACL) in the Security tab of the folder's Properties and giving them > appropriate permissions. Keep in mind that you don't usually need to use the > Deny option - it's used to make exceptions for a member of a group that has > access, but for some reason, that specific member should not have access. > > https://www.microsoft.com/windows2000/en/advanced/help/default.asp?url=/windows2000/en/advanced/help/acl_set_permissions.htm show/hide quoted text > > If they are going to be making changes to the data in that folder, including > adding new files, you'll also have to make sure their share permissions are > set to at least Modify. Hope this helps. > > Steve > > "fanman36" wrote: > > > I an issues where for years my company execs stores private company > > information on the public drive. I tried changing the permission on indivdual show/hide quoted text > > folders to keep other from access, but it caused refused access for all > > users. I moved the information from the public folder and created a new > > folder at the root and created the appropriate permission and this seems to > > work. Now i must give my company executives access to this information. What > > would be the best possible way to do this without having to change or create > > a different login scipts. Posted by steve_t on October 3, 2006, 5:15 pm Please log in for more thread options If you want the folders mapped for them when they log in, yes. I don't know of any other way to automatically map the folders for them other than a script. Steve "fanman36" wrote: show/hide quoted text > will i still have to create a login script to map the new folder to their > computers? > > "steve_t" wrote: > > > Assuming you're storing the data on an NTFS-formatted drive, giving the > > executives access should simply be a matter of adding their accounts (or, > > preferably, a group of which each is a member) to the Access Control List > > (ACL) in the Security tab of the folder's Properties and giving them > > appropriate permissions. Keep in mind that you don't usually need to use the > > Deny option - it's used to make exceptions for a member of a group that has > > access, but for some reason, that specific member should not have access. > > > > https://www.microsoft.com/windows2000/en/advanced/help/default.asp?url=/windows2000/en/advanced/help/acl_set_permissions.htm show/hide quoted text > > > > If they are going to be making changes to the data in that folder, including > > adding new files, you'll also have to make sure their share permissions are > > set to at least Modify. Hope this helps. > > > > Steve > > > > "fanman36" wrote: > > > > > I an issues where for years my company execs stores private company > > > information on the public drive. I tried changing the permission on indivdual show/hide quoted text > > > folders to keep other from access, but it caused refused access for all > > > users. I moved the information from the public folder and created a new > > > folder at the root and created the appropriate permission and this seems to show/hide quoted text > > > work. Now i must give my company executives access to this information. What show/hide quoted text > > > would be the best possible way to do this without having to change or create show/hide quoted text > > > a different login scipts. Posted by fanman36 on October 3, 2006, 5:32 pm Please log in for more thread options i thoughts so thanks. "steve_t" wrote: show/hide quoted text > If you want the folders mapped for them when they log in, yes. I don't know > of any other way to automatically map the folders for them other than a > script. > > Steve > > "fanman36" wrote: > > > will i still have to create a login script to map the new folder to their > > computers? > > > > "steve_t" wrote: > > > > > Assuming you're storing the data on an NTFS-formatted drive, giving the > > > executives access should simply be a matter of adding their accounts (or, > > > preferably, a group of which each is a member) to the Access Control List > > > (ACL) in the Security tab of the folder's Properties and giving them > > > appropriate permissions. Keep in mind that you don't usually need to use the show/hide quoted text > > > Deny option - it's used to make exceptions for a member of a group that has show/hide quoted text > > > access, but for some reason, that specific member should not have access. > > > > > > https://www.microsoft.com/windows2000/en/advanced/help/default.asp?url=/windows2000/en/advanced/help/acl_set_permissions.htm show/hide quoted text > > > > > > If they are going to be making changes to the data in that folder, including show/hide quoted text > > > adding new files, you'll also have to make sure their share permissions are show/hide quoted text > > > set to at least Modify. Hope this helps. > > > > > > Steve > > > > > > "fanman36" wrote: > > > > > > > I an issues where for years my company execs stores private company > > > > information on the public drive. I tried changing the permission on indivdual show/hide quoted text > > > > folders to keep other from access, but it caused refused access for all > > > > users. I moved the information from the public folder and created a new > > > > folder at the root and created the appropriate permission and this seems to show/hide quoted text > > > > work. Now i must give my company executives access to this information. What show/hide quoted text > > > > would be the best possible way to do this without having to change or create show/hide quoted text > > > > a different login scipts. Similar Threads Posted Using CREATOR GROUP for files/folder July 11, 2005, 10:43 am windows 7 - folder re-direction/offline files issue May 21, 2009, 11:48 am NTFS Drop Folder - Blocking Owner from changing files May 19, 2008, 4:26 pm deny create folder but allow create files June 16, 2005, 12:08 pm Files without security informations December 2, 2008, 2:07 pm Security Right question when copying or moving files September 11, 2006, 2:02 pm Edits to files cause losses of security settings February 9, 2010, 12:28 am Silencing Security Audits of Memory Mapped Files? March 11, 2007, 5:15 pm How to set this Folder security October 5, 2006, 8:25 pm Folder Security November 17, 2006, 6:34 am