Re: Share point suggestions
- From: "Will Sellers" <willsellers@xxxxxxxxxxx>
- Date: Wed, 13 Sep 2006 01:20:18 -0400
Thanks for the detail layout .
I will study this because this is exactly what I had in mind.
It appears to be a lot of work for 30 teachers and 300 students.
This also implies that this will require maintenance for each school year.
Is that correct?
Where can I get the advanced ACL editor?
I'm not clear on the AD groups.
At the Class Folders level will I be adding the teacher and student groups?
"Brian Desmond [MVP]" <brian@xxxxxxxxxxxxxxxx> wrote in message
news:u%23mnvOq1GHA.2516@xxxxxxxxxxxxxxxxxxxxxxx
Hey Will-
Here's how I did this when I ran a school network:
Create some shared drive
Create a Subfolder called Class Folders
Create a Folder for each teacher
Create a folder for each Subject
Create a folder under each subject for each Period/Section
For example:
Class Folders
---Smith
------Biology
--------Period 1
--------Period 4
--------Period 8
In AD create groups:
Smith
Smith-Biology
Smith-Biology-1
Smith-Biology-4
Smith-Biology-8
Nest the 1,4 & 8 groups inside Smith-Biology and Smith-Biology inside
Smith. Also put Mr. Smith in the Smith group.
At the Class Folders level give Students and Teachers List Folder Contents
for "This Folder Only" (you have to use the advanced ACL editor)
At the Smith level give Mr. Smith rights to Traverse Folder/Exec File,
List folder/Read Data, Delete
At the Smith\Biology level give Smith-Biology List folder Contents for
"This Folder Only".
Now at each Smith\Biology\Period K level you want to give Smith-Biology-K
Create Files (this folder only) rights.
This will give the kids the rights to drop files in there but not read
anyone else's or see them. It makes a dropbox.
If you have Windows 2003 SP1 on your file server, look up Access Based
Enumeration to make it so people only see folders they have access to.
This is really locked down - it prevents mr smith from screwing things up
(he will if you let him) and it keeps the kids from getting into things
other than their own. If you want to let them edit/delete their things in
the dropbox, add a "Creator Owner" ACL to the Smith\Biology\Period K level
and give it Modify rights.
If you need a place where Mr. Smith can share files with teh kids, I would
create a couple levels - at the teacher level, subject level, and period
level. If you do it at the period level create Smith\Biology\Period
K\Dropbox and \Shared. For Shared, give Mr. Smith Modify and the kids Read
& Execute.
Let me know if you have any questions.
--
Thanks,
Brian Desmond
Windows Server MVP - Directory Services
www.briandesmond.com
"Will Sellers" <willsellers@xxxxxxxxxxx> wrote in message
news:LYqdnRKuHJtyc5vYnZ2dnUVZ_t6dnZ2d@xxxxxxxxxxxxxx
We have a server 2003 school environment, where teachers have 1 or more
classes and students can belong to 1 or more of those classes.
I need some guidance on how to set up a share where students can access
their class folders with certain access rights.
In addition, the teachers will have full control of their class folders.
It would be nice if teachers and students could only see their folders
and not the other 30 plus teacher/class folders.
I thought about allowing the teachers to create their class folders on a
shared drive and then assign student id's to the folders with defined
access rights ...read, write, no modify.
Please point me in the right direction.
.
- Follow-Ups:
- Re: Share point suggestions
- From: Brian Desmond [MVP]
- Re: Share point suggestions
- From: David Denmark
- Re: Share point suggestions
- References:
- Share point suggestions
- From: Will Sellers
- Re: Share point suggestions
- From: Brian Desmond [MVP]
- Share point suggestions
- Prev by Date: Re: AD Schema extension and ACLing
- Next by Date: Windows 2000 Domain Controller does not take over
- Previous by thread: Re: Share point suggestions
- Next by thread: Re: Share point suggestions
- Index(es):
Relevant Pages
|