Complex File Permission

Complex File Permission

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Complex File Permission Shawn 06-05-2007
Posted by =?Utf-8?B?U2hhd24=?= on June 5, 2007, 6:46 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Does anyone know of a software that could be helpful in maintaining
permissions on a Windows 2003 server? I have tried Universal Shield which is
able to take a file mask such as C:\subfolder\*\*\ and modify some very
simple permissions, but it doesn't work out for my network. It's not
flexible enough. Really what I'm looking to do is the following:

P:\subfolder -- No changes can be made to any subfolders within this folder
P:\Subfolder\subfolder -- These subfolders can be changed, but can't be moved
P:\subfolder\subfolder\subfolder -- No changes can be made to any subfolders
within this folder
P:\subfolder\subfolder\subfolder\subfolder --These subfolders can be
changed, but can't be moved


I am able to do the first 2, but there are so many subfolders in the second
2 that the maintnance appears to be a problem. Let me know if you know of
any suitable apps, that can do this.

-Shawn



Posted by MPerrault on June 5, 2007, 9:22 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
> Does anyone know of a software that could be helpful in maintaining
> permissions on a Windows 2003 server? I have tried Universal Shield which is
> able to take a file mask such as C:\subfolder\*\*\ and modify some very
> simple permissions, but it doesn't work out for my network. It's not
> flexible enough. Really what I'm looking to do is the following:
>
> P:\subfolder -- No changes can be made to any subfolders within this folder
> P:\Subfolder\subfolder -- These subfolders can be changed, but can't be moved
> P:\subfolder\subfolder\subfolder -- No changes can be made to any subfolders
> within this folder
> P:\subfolder\subfolder\subfolder\subfolder --These subfolders can be
> changed, but can't be moved
>
> I am able to do the first 2, but there are so many subfolders in the second
> 2 that the maintnance appears to be a problem. Let me know if you know of
> any suitable apps, that can do this.
>
> -Shawn

Have you thought about restructuring your folder hierarchy to be a
little more manageable? maybe the first and and third, and second and
fourth. They seem to fall under the same permission set.

-MP


Posted by Roger Abell [MVP] on June 5, 2007, 9:28 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

> Does anyone know of a software that could be helpful in maintaining
> permissions on a Windows 2003 server? I have tried Universal Shield which
> is
> able to take a file mask such as C:\subfolder\*\*\ and modify some very
> simple permissions, but it doesn't work out for my network. It's not
> flexible enough. Really what I'm looking to do is the following:
>
> P:\subfolder -- No changes can be made to any subfolders within this
> folder
> P:\Subfolder\subfolder -- These subfolders can be changed, but can't be
> moved

But this contradicts the former.
Evidently the former was to have been
> P:\subfolder -- No changes can be made to first level subfolders within
> this folder


> P:\subfolder\subfolder\subfolder -- No changes can be made to any
> subfolders
> within this folder
> P:\subfolder\subfolder\subfolder\subfolder --These subfolders can be
> changed, but can't be moved
>
>
> I am able to do the first 2, but there are so many subfolders in the
> second
> 2 that the maintnance appears to be a problem. Let me know if you know of
> any suitable apps, that can do this.
>

You may be focusing on setting the permissions at the wrong location,
well, not wrong really so much as inconvenient.
You appear to be attempting to set the permissions for each
P:\subfolder\subfolder\subfolder\subfolder directly on each.
If instead you set the permissions on P:\subfolder\subfolder\subfolder
set to apply to Subfolders (perhaps subfolders and files) then in one
location you set the permissions identically for all of the individual
P:\subfolder\subfolder\subfolder\subfolder folders.

Have you looked at use of the Filesystem section in a Security Template
(or GPO) ?

Roger



Posted by =?Utf-8?B?U2hhd24=?= on June 28, 2007, 1:56 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Sorry Roger for the delay. This problem has been put off for other issues.

I looked at the group policy, but I guess I need to be able to use a file
mask using wildcards (subfolder\*\*) that way I can target the specific
levels. I'm thinking the best way is just to setup a script and run it every
few hours to ensure that permissions are retained. Once I get the time, I'm
going to look at setting up the script. There's definitely not any visibly
available software out there to do this. The group policy thing is pretty
nice though, and may come in handy in this situation.

Thanks

"Roger Abell [MVP]" wrote:

>
> > Does anyone know of a software that could be helpful in maintaining
> > permissions on a Windows 2003 server? I have tried Universal Shield which
> > is
> > able to take a file mask such as C:\subfolder\*\*\ and modify some very
> > simple permissions, but it doesn't work out for my network. It's not
> > flexible enough. Really what I'm looking to do is the following:
> >
> > P:\subfolder -- No changes can be made to any subfolders within this
> > folder
> > P:\Subfolder\subfolder -- These subfolders can be changed, but can't be
> > moved
>
> But this contradicts the former.
> Evidently the former was to have been
> > P:\subfolder -- No changes can be made to first level subfolders within
> > this folder
>
>
> > P:\subfolder\subfolder\subfolder -- No changes can be made to any
> > subfolders
> > within this folder
> > P:\subfolder\subfolder\subfolder\subfolder --These subfolders can be
> > changed, but can't be moved
> >
> >
> > I am able to do the first 2, but there are so many subfolders in the
> > second
> > 2 that the maintnance appears to be a problem. Let me know if you know of
> > any suitable apps, that can do this.
> >
>
> You may be focusing on setting the permissions at the wrong location,
> well, not wrong really so much as inconvenient.
> You appear to be attempting to set the permissions for each
> P:\subfolder\subfolder\subfolder\subfolder directly on each.
> If instead you set the permissions on P:\subfolder\subfolder\subfolder
> set to apply to Subfolders (perhaps subfolders and files) then in one
> location you set the permissions identically for all of the individual
> P:\subfolder\subfolder\subfolder\subfolder folders.
>
> Have you looked at use of the Filesystem section in a Security Template
> (or GPO) ?
>
> Roger
>
>
>

Similar ThreadsPosted
File Permission Issue June 16, 2005, 3:35 pm
File and Folders Permission October 30, 2008, 5:57 pm
group policy and file permission issue December 5, 2005, 2:49 pm
NTFS file/folder permission to a computer... January 31, 2007, 10:08 am
Do not have permission to view or edit permission settings for a folder June 17, 2005, 7:58 am
Complex Security February 23, 2007, 3:00 pm
Complex Password Tool October 13, 2006, 12:09 pm
Setting Password must meet complex requirements July 21, 2005, 8:18 pm
temporary permission July 12, 2005, 8:00 am
parental permission December 21, 2005, 7:58 pm

The site map in XML format XML site map

Contact Us | Privacy Policy