Help with File Security

Help with File Security

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Help with File Security Chaplain Doug 02-01-2006
Posted by =?Utf-8?B?Q2hhcGxhaW4gRG91Zw== on February 1, 2006, 12:01 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Windows Server 2003. I have a Shared folder on my server's C: drive which
contains files shared by my network users. I need to setup security
(permissions) so that I can keep people from deleting files in folders other
than their own, creating files in other's folder, etc. I need to be able to
designate an owner for each of the folders and give that owner full rights,
etc. I need some tips on where to start and how to implement this. Do I
start from the bottom up (at the subfolder level) or from the top down (at
the Shared folder level)? Thanks for any help you may give. God bless.
--
Dr. Doug Pruiett
Good News Jail & Prison Ministry
www.goodnewsjail.org

Posted by Steven L Umbach on February 1, 2006, 2:22 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
First if you do not understand special permissions that well take a look at
the link below on how they work and then look at the root/drive share to see
how they are configured. The thing to remember is that users/groups can have
more than one special permission for each possibility in the "apply onto"
box.

http://support.microsoft.com/default.aspx?scid=kb;EN-US;308419

There are a couple strategies in shared folders. One where a single parent
folder is shared and the other where several parent folders are shared.
There is not a right or wrong way but whatever works for you. Assuming you
want to share a single parent folder then create the folder and then change
the permissions on it to reflect the users/groups that you want to have
access to all the folders under the parent folder. The security settings on
the main security page are for "folders, subfolders, and files unless a box
is dimmed which indicates that special permissions are being assigned. The
go into the advanced page, select add, and add the user/group you want to be
able to read/list the parent folder to give them read/list equivalent
special permission and select "this folder only" in the apply onto. Then
create your subfolders and give the user/groups the permissions you want
which sounds like read/list/execute/write and the "owner/folder admin" you
designate can have full control permissions. That will allow the specified
user/groups to write files to the folder. You will also notice creator owner
listed for the folder with full control permissions. That allows the user
that writes the file to have full control and be the owner which means that
the same user that created the file can delete it but not other users that
have only read/list/execute/write.

If you are creating folders that include Office files you will probably run
into complications because you can not edit Office with write permissions
only as the user would need to have modify permissions because Office
creates temporary files and when the user closes the edited file it then
deletes the original file and the user editing the file becomes the new
owner. --- Steve

> Windows Server 2003. I have a Shared folder on my server's C: drive which
> contains files shared by my network users. I need to setup security
> (permissions) so that I can keep people from deleting files in folders
> other
> than their own, creating files in other's folder, etc. I need to be able
> to
> designate an owner for each of the folders and give that owner full
> rights,
> etc. I need some tips on where to start and how to implement this. Do I
> start from the bottom up (at the subfolder level) or from the top down (at
> the Shared folder level)? Thanks for any help you may give. God bless.
> --
> Dr. Doug Pruiett
> Good News Jail & Prison Ministry
> www.goodnewsjail.org



Similar ThreadsPosted
Help with File Security August 18, 2005, 1:28 pm
File xfer security December 10, 2007, 2:30 pm
Auditing / File Security May 22, 2008, 1:02 pm
file transfer security issue June 30, 2005, 11:06 am
Open File - Security Warning September 16, 2005, 11:47 am
Win2003 SERVER file security BUG! February 7, 2006, 8:49 am
File Versions for Security Bulletins March 1, 2006, 12:45 am
open file-security warning January 5, 2007, 4:58 pm
Open File-Security Warning March 14, 2008, 6:44 pm
Command for changing file security? May 14, 2008, 11:33 pm

The site map in XML format XML site map

Contact Us | Privacy Policy