directory security issue

[alexlights]

I'm picking up the pieces of a bad way to manage a secure directory and I need some advice/tips. I'm not a pro, so here it goes.

We have a Win2000 server with about 30 users. We use a .bat file to map server directories as drives on the users local PC. We have a drive set up as g:\engineering. Users in the group Engineering have full access. This is about 5 people.

In this G: drive is a directory called Quality. Everyone needs access to this, but we only want engineers to be able to write to it. So there is another group called Quality. They gave this group list access to the g: drive, and read access to the quality directory. They put every user in the Quality group. In an effort to keep everyone out of the other directories, they went to each directory and blocked access. This then blocked the engineers.

As a member of the engineer group I never noticed it because at the same time I was added to this group I was added to Admin.

So anyway...I was thinking to just make another letter drive for this type of stuff and assign the Everyone group read access. Turns out the Quality directory contains a database with links to files in the directory. The links are not relative, they are actually specific (g:\quality\files..). If I move the database I also have to rewrite it.

Can this be fixed? I don’t mind starting over making groups. I rather not rebuild the database. I’m looking for some advice/tips here. Thanks.

 

[1101001100110101]

Couldnt you just make another group for the engeneers and take them out of the quailty group. then give that group the access you need. Everyone else would be locked down, but not the group you wanted. Although setting block permissions is usually not the best way to go about it. If you dont want somone to access the folder just give them no permissions at all on the folder.