Folder Permissions

[efector]

I have a shared folder which contains each different department's folders. each individual department, has permissions set on the folder with NTFS permissions, so that only people in that department can access that particular folder. The problem I am having is that users are creating folders in the root of the department share. How can I stop them from being able to create folders in the root of the overall department share(I dont care if they make folders inside their respective department's folder or not though).

Thanks

 

[baronne]

This is how I have mine set:

\\server\shared
Staff - Read & Execute - This folder only

\\server\shared\department1
\\server\shared\department2, etc.
Staff - Modify - This folder, subfolders & files

you'll need to go into the advanced security settings for this...
cheers, hope this helps.

Baronne

:: baronne
------------------
"lekker, shot bru

 

[1LUV1T]

Why not just link each department folder to the respective department?

I have a drive map listing so like;

G:/ Designers on \\server\designers$
H:/ Accounting on \\server\accounting$

This way other depts dont know or dont see other department drves. And of course I have ACL in place.

 

[efector]

the reason why we do that, is because we have users who have rights under different departments and this way, there is only ONE letter mapped (its also political), so we use a program called WINCLOAK, which hides the folders which u dont have acl access to.

 

[baronne]

AOConsulting --- eeew!!! nooo!!! drive mappings are like... so old hat man!

:: baronne
------------------
"lekker, shot bru

 

[1LUV1T]

I just don't see a reason for employees to see everything that's out there. It's natural to be curious about "What's in that Accounting folder?" Yes, ACL help keep those curious out but still. I'd rather have the designers think that the only network drive available is there pictures and sketches drive and nothing else.

 

[Daveyd123]

AOconsulting...If you don't want users to see what they don't have access to, implement Access Based Enumeration. Works like a charm for me!

http://www.microsoft.com/downloads/...D9-78D9-4342-A485-B030AC442084&displaylang=en

 

[baronne]

that's what we've got... ABE ... works great for us too...

:: baronne
------------------
"lekker, shot bru

 

[1LUV1T]

You're right. This is better.

Thanks.

 

[58sniper]

Using different drive letters doesn't solve anything. Setting minimal rights at the root and explicit rights at the individual departmental folders is much easier and more streamlined.

Pat Richard, MCSE MCSA:Messaging CNA
Microsoft Exchange MVP
Want to know how email works? Read for yourself -

http://www.ietf.org/rfc/rfc2821.txt

 

[baronne]

..unfortunately in our case we have to map drives as we have old software (educational software is a prime candidate for old crappy ways)
Baronne

:: baronne
------------------
"lekker, shot bru