Re: NTFS Permissions

Larry,
Thanks for responding.

Unfortunately this pattern repeats itself for each of our customers, and we
used to have the data split, but that became too complicated to see the big
picture.......

Any ideas on how to approach this to try and determine where and why it
doesn't work the way you'd expect? I tried everything I couold think of.

Thanks
--
Sean


"Larry Struckmeyer" wrote:

Hi Sean:

There is *probably* a way to do what you want, (hint inherited ntfs security
settings) but it is much to complex for my tired brain, or what is left of
it.

Could you not "un nest" the folders and give each one its own share and
security settings?

You need to set the security for each group at each level and be careful of
the inheritance and the pass thru, the little radio that says apply these
settings to files and folders within this folder.

Still, it is much easier to work with one share at a time. Although having
said that I look after a system where the databases are in parallel, not
nested, folders under the primary folder "data bases", and one can manage
that fairly easily. Can't imaging nesting them 5 levels deep with different
permissions/security at each level.

If you ever do get it right, take a screen shot of each level and put it in
your documentation, cause in three weeks/month it will change again.

Larry



"Sean" <Sean@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:5E0C95D0-39DC-432E-A12C-15CAB9099045@xxxxxxxxxxxxxxxx
I am having a difficult time with a particular scheme of protecting
folders.
I would like to create the following directory structure, and have five
groups be able to have different access to the data in the folders. I've
tried mutiple approaches and at best get some to work, others to work
backwards.....

This is a complex scheme so I guess I missed something. Any help would be
appreciated.

DA = Domain Admin
DU = Domain User
DM = Data Manager
I Group - Security Group for access
M Group - Security Group for access
T Group - Security Group for access
A Group - Security Group for access

-Data Folder (Parent)- Share Permission (Domain Users - Full Control) /
NTFS
Permission (DA - Full, DU - Read and Execute)
-Folder C - NTFS permission (DA & DM - Full, DU - Read and Exec)
-Folder S - NTFS permission (DA & DM - Full, DU - Read and Exe)
-Folder L - NTFS permission (DA & DM - Full, DU - Read and Exec)
-Folder I - NTFS permission (DA & DM - Full, DU - Read and Exec, I
Group - Modify)
-Folder M - NTFS permission (DA & DM - Full, DU - Read and Exec, M
Group - Modify)
-Folder T - NTFS permission (DA & DM - Full, DU - Read and Exec, T
Group - Modify)
-Folder A - NTFS permission (DA & DM - Full, DU - Read and Exec, A
Group - Modify)

Hopefully I painted a decent picture of what I'm trying to do. I focused
on
one folder at a time and get all the way to the final 4 and then things
get
goofy....

Thanks in advance.
--
Sean



.

Relevant Pages

  • RE: Limit a VPN user to a specific area of the filestore
    ... To avoid the VPN users accessing to other shared folders, ... to create a security group and then remove the group from NTFS Permissions ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • RE: Read only folders
    ... This newsgroup only focuses on SBS technical issues. ... you may want to contact Microsoft CSS directly. ... I would like to create multiple read-only folders where multiple ... I think i start of by creating a security group and adding all ...
    (microsoft.public.windows.server.sbs)
  • PFDavAdmin, Universial Security Group Permissions with Public Folders
    ... I have recently began using the PFDavAdmin ... management side of the hundreds of public folders we manage. ... add and then add the Universial Security Group. ... Can Universal Security Groups be successfully added to Public Folders? ...
    (microsoft.public.exchange2000.admin)
  • Limit a VPN user to a specific area of the filestore
    ... I have set up a share in the file store, below which are the folders I ... Will just making this user a member of the security group I created ... and remoiving all other group memberships solve the ...
    (microsoft.public.windows.server.sbs)
  • Re: NTFS Permissions
    ... There is *probably* a way to do what you want, (hint inherited ntfs security ... security settings? ... settings to files and folders within this folder. ... Group - Modify) ...
    (microsoft.public.windows.server.sbs)