Share Problem

[MISMCSEJERSEY]

I have a set of folders and I am sharing each folders. Each folder is for a separate user who has permission to write to his/her folder.
Then I have other folders each shared on the same level as the above folders. Now inside each of these particular shared folders are user folders. I need to give a certain group permission to open the share and see folders (but not open them and find their folder, (were they can save things). I don’t want them to be able to save a document outside of there particular folder.
On the user’s particular folder, I use “modify” as the permission. (which works fine). The problem is what should the permission be on the share in order for them to open it and find their folder?

 

[Jpoandl]

Kind of hard to see exactly what you are talking about...

But lets say you have a this scenerio:

Folder share = userdata

Under userdata, these directories can be found:

bob = NTFS gives only BOB access to modify data
dave = NTFS gives only DAVE access to modify data
managers = BOB and DAVE can modify data

Because all users access this part of the data through the USERDATA share, CHANGE must be given to all users on the share.

USERDATA = Share permissions = CHANGE

Bob will be able to modify documents in the Bob folder but the not the Dave folder

Dave will be able to modify documents in the Dave folder but not the Bob folder

Both Bob and Dave will be able to modify documents in the Managers folder.

-later





Joseph L. Poandl
MCSE 2003

If your company is in need of experts to examine technical problems/solutions, please contact

http://www.NJCOMPUTERNETWORKS.com

(Sales@njcomputernetworks.com)

 

[MISMCSEJERSEY]

So I give the group of users that have user files located within the share permission to change the share.

Drive with Data on it
Share 1 - Share permission is set to "change" for all users who folders are in this share
This folder has 5 user folders in it. Each user has permission to modify their folder.

Share 2 - Share permission is set to "change" for all users who folders are in this share
This share has 5 user folders in it. Each user has permission to modify their folder.

Problems
1. Can they save into the share instead of their folder . I want them to only save to their folder.
2. Can they change the name of any other users share.

 

[Jpoandl]

Problems
1. Can they save into the share instead of their folder . I want them to only save to their folder.

No, how can they, they only have SHARE level rights, the NTFS level rights do NOT give them permission to modify data (except within thier own folder)


2. Can they change the name of any other users share.

No, giving the CHANGE right on a share does not give them ability to modify data unless they also have MODIFY or FULL CONTROL NTFS permissions.

...sounds like you may need more information on how basic NTFS and SHARE security works. This is generally found on MCSE exams and is needed for real world experiences for properly securing Windows data.

Here is a site:

http://www.nj.devry.edu/~tkist/Security.pdf

http://www.techtutorials.com/tutorials/nt/ntfs_share.shtml

http://www.cramsession.com/articles/files/share-versus-ntfs-permiss-9162003-1702.asp

Another suggestion is to setup the NTFS and share security like you think it should work. Then log in as various users to see what data you can access. This is a very good way of learning how the security works.

good luck

Joseph L. Poandl
MCSE 2003

If your company is in need of experts to examine technical problems/solutions, please contact

http://www.NJCOMPUTERNETWORKS.com

(Sales@njcomputernetworks.com)

 

[aftertaf]

i prefer leaving everyone full control on the share and just managing NTFS permissions..
but then again, i am lazy...

Aftertaf (david)
MCSA 2003

 

[bofhrevenge2]

Give users change permissions on the share as it allows users to modify work in their folders but they cannot fiddle with NTFS permissions.