Windows 2003 Server Permissions

martint12005 · 05-02-2007, 06:41 AM

Hi,

I'm struggling with setting up permissions to do what I though would be a simple thing. Here's the scenario:

We have a shared folder on the Windows 2003 server, called Data. The folder is shared with Everyone = Full Control. Users map to the share using the T:. Within the T: there are approx. 12 folders, each with many sub-folders and files.

I have created Domain Local and Global security groups, the relevent ones are as follows:

Domain Local group = MIL-FS1_DATA_READ, MIL_FS1_DATA_WRITE

Global group = MIL_STANDARD_USERS

All users are in the MIL_STANDARD_USERS group, and the MIL_STANDARD_USERS group is a member of both the MIL-FS1_DATA_READ and MIL_FS1_DATA_WRITE group.

I want to prevent users being able to move / delete any of the 12 root folders when they open up T:. It has been pretty common for users to accidentally drag and drop folders into other folders and I want to prevent this. Users should be able to delete sub-folders of T: or files within sub-folders of T:. I also want to prevent users creating or saving data in the root of T:.

Any help would be much appreciated!

Thanks,
Martin.

05-02-2007, 06:41 AM	#1 (permalink)
martint12005 Registered User Join Date: May 2007 Posts: 1 OS: Windows XP	Windows 2003 Server Permissions Hi, I'm struggling with setting up permissions to do what I though would be a simple thing. Here's the scenario: We have a shared folder on the Windows 2003 server, called Data. The folder is shared with Everyone = Full Control. Users map to the share using the T:. Within the T: there are approx. 12 folders, each with many sub-folders and files. I have created Domain Local and Global security groups, the relevent ones are as follows: Domain Local group = MIL-FS1_DATA_READ, MIL_FS1_DATA_WRITE Global group = MIL_STANDARD_USERS All users are in the MIL_STANDARD_USERS group, and the MIL_STANDARD_USERS group is a member of both the MIL-FS1_DATA_READ and MIL_FS1_DATA_WRITE group. I want to prevent users being able to move / delete any of the 12 root folders when they open up T:. It has been pretty common for users to accidentally drag and drop folders into other folders and I want to prevent this. Users should be able to delete sub-folders of T: or files within sub-folders of T:. I also want to prevent users creating or saving data in the root of T:. Any help would be much appreciated! Thanks, Martin.