Re: NTFS Permissions



Hi Sean:

There is *probably* a way to do what you want, (hint inherited ntfs security
settings) but it is much to complex for my tired brain, or what is left of
it.

Could you not "un nest" the folders and give each one its own share and
security settings?

You need to set the security for each group at each level and be careful of
the inheritance and the pass thru, the little radio that says apply these
settings to files and folders within this folder.

Still, it is much easier to work with one share at a time. Although having
said that I look after a system where the databases are in parallel, not
nested, folders under the primary folder "data bases", and one can manage
that fairly easily. Can't imaging nesting them 5 levels deep with different
permissions/security at each level.

If you ever do get it right, take a screen shot of each level and put it in
your documentation, cause in three weeks/month it will change again.

Larry



"Sean" <Sean@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:5E0C95D0-39DC-432E-A12C-15CAB9099045@xxxxxxxxxxxxxxxx
I am having a difficult time with a particular scheme of protecting
folders.
I would like to create the following directory structure, and have five
groups be able to have different access to the data in the folders. I've
tried mutiple approaches and at best get some to work, others to work
backwards.....

This is a complex scheme so I guess I missed something. Any help would be
appreciated.

DA = Domain Admin
DU = Domain User
DM = Data Manager
I Group - Security Group for access
M Group - Security Group for access
T Group - Security Group for access
A Group - Security Group for access

-Data Folder (Parent)- Share Permission (Domain Users - Full Control) /
NTFS
Permission (DA - Full, DU - Read and Execute)
-Folder C - NTFS permission (DA & DM - Full, DU - Read and Exec)
-Folder S - NTFS permission (DA & DM - Full, DU - Read and Exe)
-Folder L - NTFS permission (DA & DM - Full, DU - Read and Exec)
-Folder I - NTFS permission (DA & DM - Full, DU - Read and Exec, I
Group - Modify)
-Folder M - NTFS permission (DA & DM - Full, DU - Read and Exec, M
Group - Modify)
-Folder T - NTFS permission (DA & DM - Full, DU - Read and Exec, T
Group - Modify)
-Folder A - NTFS permission (DA & DM - Full, DU - Read and Exec, A
Group - Modify)

Hopefully I painted a decent picture of what I'm trying to do. I focused
on
one folder at a time and get all the way to the final 4 and then things
get
goofy....

Thanks in advance.
--
Sean


.



Relevant Pages

  • Re: folder permissions arent defaulted
    ... To display the Security tab... ... Click Start, point to Settings, and then click Control Panel. ... On the View tab, under Advanced settings, clear? ... share folders with everyone on your workgroup or network and make folders in ...
    (microsoft.public.windowsxp.newusers)
  • Re: owa
    ... Sounds like your directory security settings in iis have changed for some reason. ... When this happens there are virtual folders with permissions settings specific to ... exchange web. ...
    (microsoft.public.exchange2000.admin)
  • Re: Security tab on files or folders and automatic login at Windows startup
    ... To display the Security tab... ... [[Specifies that simplified sharing is enabled. ... share folders with everyone on your workgroup or network and make folders in ... Remove the Security tab ...
    (microsoft.public.windowsxp.general)
  • Re: Permissions
    ... security group. ... not allow creation of subfolders, ... Allow users to be able to create, delete and modify file within the ... Disallow the ability to modify the security on any of the folders. ...
    (microsoft.public.windows.server.networking)
  • Re: Access to folders
    ... Yet even though I am the administrator and only user, I still have to give myself permission before I can do certain things or run certain programs. ... I have managed to change the security settings on various folders by going into Properties so that I can access the folders freely and see and access all files. ... > frustrated by the layers of security I have to constantly wade through. ...
    (microsoft.public.windows.vista.security)