Re: Trouble Assigning Folder Permissions
From: Lanwench [MVP - Exchange] (lanwench_at_heybuddy.donotsendme.unsolicitedmail.atyahoo.com)
Date: 09/04/04
- Next message: Lanwench [MVP - Exchange]: "Re: Limit Folder sizes"
- Previous message: Dan Lovinger [MSFT]: "Re: Question about DFS"
- In reply to: Tom E. Pinkerton: "Trouble Assigning Folder Permissions"
- Messages sorted by: [ date ] [ thread ]
Date: Sat, 4 Sep 2004 11:45:53 -0400
Tom E. Pinkerton wrote:
> Friends,
>
> I'm relatively new to Windows Server 2003, and obviously
> there is a big piece of the security picture that I am
> missing. :-)
>
> At the school where I work, we have Windows Server 2003
> Standard running our internal network. On that server, I
> have a shared folder called "Apps" where I am storing the
> student-accessible applications and related files that are
> made available to them over the network. Within that apps
> folder, there is a folder called "KBPRO" for our
> Keyboarding Pro software, and under that a folder
> called "Students" where all student performance data is
> stored.
In Win2003, share permissions are everyone=read only by default. Change this
to Full Control for each share.
Personally, for your setup, I'd set them all up as separate folders at the
same level - and then set up the shares and NTFS permissions appropriately.
For example:
D:\APPS shared as APPS (or APPS$ for a hidden share)....NTFS permissions=
administrators & system=full control, users=whatever they need
D:\ KBPRO shared as KBPRO (or with the $) - same thing for NTFS permissions
D:\STUDENTS shared as STUDENTS/$ - administrators/system=full control,
users=modify
Then use a login script to map drives to these shares -
net use x: \\server\share /persistent:no
The advantage of hidden shares is that nobody can browse them.
>
> In order for the software to work properly, student
> accounts need to have full read/write access to
> the "Students" folder and everything under it.
> Unfortunately, regardless of how I try to set the
> appropriate security permissions, everyone except
> administrators receives an "access denied" error message
> when they attempt to write to the folder, or any folder on
> the network for that matter. They can read the folders
> just fine, but they can't write to them.
>
> I have tried assigning "Full Control" permissions for
> the "Students" folder to the Users group, to the Domain
> Users group, to the Everyone group, to the Students group
> that all students are members of, and even to an
> individual user account. None of these had any effect. As
> a test, I even tried giving the Everyone group "Full
> Control" access to the entire data partition. Even that
> did not allow anyone to write to any folder on that drive.
>
> Does anyone have any thoughts on what I might be missing
> here?
>
> Thanks!
>
> =Tom=
- Next message: Lanwench [MVP - Exchange]: "Re: Limit Folder sizes"
- Previous message: Dan Lovinger [MSFT]: "Re: Question about DFS"
- In reply to: Tom E. Pinkerton: "Trouble Assigning Folder Permissions"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|