Re: Access to data folder on network drive

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Alex <alexdeletethishammerstein@xxxxxxxxxxxxx> wrote:
Hi - thanks for your post and yes it all makes sense and i can easily
implement that

Great; glad it helps. I find it a very good config.

As far as connection itself, he will be connecting from India, and I
was going to suggest a VPN connection - is that the best way?

VPN for direct file access really stinks, generally speaking. It would be
far better to set him up to access a domain-member XP Pro workstation using
remote desktop (via RWW) or a terminal server - even if you want him to
access *that* via VPN.


Thanks

Alex

"Lanwench [MVP - Exchange]"
<lanwench@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message news:%23mor8QHcHHA.4632@xxxxxxxxxxxxxxxxxxxxxxx
Alex <alexdeletethishammerstein@xxxxxxxxxxxxx> wrote:
Hi

i have to allow a technician to have access to a folder and its
files on the data drive of our SBS2003 folder.
What is the best method for allowing him access, and how do I
restrict him onto to that folder?

thanks

Alex

When I set up a server, I like to create my own AD security
groups....and control all access to shared folders using those
custom groups. Meaning, I don't use Everyone or Domain Users or
Authenticated Users for NTFS permissions. Instead, I manually
configure permissions so that, for example, Administrators + System
= full control, "Company Users" = modify, to the \\server\share in
question. In such a scenario, all you need to do is create a new user,
make
sure they are *not* a member of "Company Users" - and put him/her in
"Vendor Access" or whatever you want to call it, and add *that*
group to the folder in question with the permissions you wish (along
with the Company Users group and Administrators+System).

This works well, and you should pretty easily be able to implement
it (create/add the groups with the permissions you want & members
you want, and then change the NTFS permissions on the folders so
you've removed the built-in groups your users are in)

Hope this makes sense - it really isn't that complicated to set up.

Beyond the above, how will this technician be connecting to the
server data, and from where?



.

Relevant Pages

  • RE: Windows 2003 Server - Everyone Group
    ... this folder only accessable by the users in the "special" group. ... Configure User and Group Access on an Intranet in Windows Server ... NTFS files system permissions control ... group that you want to set permissions for, click Check Names to verify the ...
    (microsoft.public.win2000.networking)
  • Re: Office Docs wont Open? and BU Drive not Recognized?
    ... Create a new Folder: ... On the server share... ... SHARING tab | Permissions | Share Permissions | Group or User Names ... If I copy the document to the local Client, the document opens ...
    (microsoft.public.windows.server.sbs)
  • Re: An NT Security Gotcha that looks like a Jet Security issue
    ... >people remotely via Windows Terminal Server. ... >code when it was run by a user that didn't have full permissions on ... There's a top-level DATA folder, ... >ApplicantsDB and Quickbooks. ...
    (comp.databases.ms-access)
  • Re: Exchange Move Issues?
    ... I'm a bit confused on what permissions to assign for SBS, ... When you finish moving the databases, ... You can move the log files and database files to any folder that you want to ... Note Only assign permissions to the Server Operators group if the Exchange ...
    (microsoft.public.windows.server.sbs)
  • Re: MS - Access Issues
    ... I don't see anything anywhere for NTFS folder permissions. ... Nor can it find the domain server. ... checked to bypass proxy server for local addresses. ...
    (microsoft.public.windows.server.sbs)