Hello
I have a question regarding File Structure Permissions.
Our server has the following configuration:
Windows 2003 SP1
C: = 30gb
D: =500gb
The D drive is used for Data Access, general office documents and pdfs.
Currently we have Two shared directories all users have access via two mapped network drives.
Security is simple; two directories:
Data Area1 - Secured using NTFS Security and various Active Directory Users/Groups.
Data Area2 – Secured use NTFS Security, however one group called Company Data, and every user in the company has full access.
The D drive has 232 gb of data so far.
Our question is regarding the Data Area2 Share, current NTFS Security is:
All boxes checked except for Full control.
All users can do as they wish in any directory within this folder.
There is around 34,432 folders and many files.
One of our current problem is every so often files go missing, we don’t know where there go, but we can say that certain users are accidently moving them around, as most cases we do a search on the complete drive and find them somewhere, sometimes it could have been dragged to a users desktop, sometimes its deleted.
We have enabled Shadow Copies and this helps us out a lot.
I have been asked the following:
Is it possible to setup some sort of security which would stop people moving/deleting files and folders around accidentally, they must have full editing access to every document and be able to create new documents?
Can we setup Auditing on the server so if a file or folder is MOVED or DELEED ONLY it’s logged in the event viewer, I have seen Auditing enabled of another site and its not useable as it logs every thing, we want auditing for only move/delete, if so how?
As this server is only used for File access, are there any other suggestions to help ?
Thank
I have a question regarding File Structure Permissions.
Our server has the following configuration:
Windows 2003 SP1
C: = 30gb
D: =500gb
The D drive is used for Data Access, general office documents and pdfs.
Currently we have Two shared directories all users have access via two mapped network drives.
Security is simple; two directories:
Data Area1 - Secured using NTFS Security and various Active Directory Users/Groups.
Data Area2 – Secured use NTFS Security, however one group called Company Data, and every user in the company has full access.
The D drive has 232 gb of data so far.
Our question is regarding the Data Area2 Share, current NTFS Security is:
All boxes checked except for Full control.
All users can do as they wish in any directory within this folder.
There is around 34,432 folders and many files.
One of our current problem is every so often files go missing, we don’t know where there go, but we can say that certain users are accidently moving them around, as most cases we do a search on the complete drive and find them somewhere, sometimes it could have been dragged to a users desktop, sometimes its deleted.
We have enabled Shadow Copies and this helps us out a lot.
I have been asked the following:
Is it possible to setup some sort of security which would stop people moving/deleting files and folders around accidentally, they must have full editing access to every document and be able to create new documents?
Can we setup Auditing on the server so if a file or folder is MOVED or DELEED ONLY it’s logged in the event viewer, I have seen Auditing enabled of another site and its not useable as it logs every thing, we want auditing for only move/delete, if so how?
As this server is only used for File access, are there any other suggestions to help ?
Thank