none
restricted access to mapped Windows 2008 drive

    Question

  • I mapped drive and create sub directores to allow  managers store and share some pdf files and others, them i been ask to add more users to this drive to look up documents..

    And was ok until i been ask to protect insite this map drive some folders , that only Manager can see files or only other manager can modify files , but other can not

    I had some problem to restrict this issues

    Any help please ?

    Thnaks i advance

    OS -Win 2008 R2 64 bit DC

    Thursday, September 17, 2015 10:42 PM

All replies

  • Hello,

    This can be achieve by tweaking  NTFS permissions on the shared folder.

    I would recommend access control via group method than individually.

    1. Create groups based on Access Control

    2. Add the groups with appropriate NTFS permissions on the shared folder.


    If you find this helpful, kindly mark as answer. If you have any queries, please post back as a reply. Will look forward to your feedback. Thanking You Soumyajyoti Biswas

    Friday, September 18, 2015 8:50 AM
  • Thnaks for respond

    I create group for users and other group for for managers

    managers have full access on top level down, users limited access on top level, but i denied on top level of the sub folder access to specisfic folder, the folder was gone on view level

    what do i do wrong?

    Saturday, September 19, 2015 12:17 AM
  • Hello,

    Thank you for your post.

    ***************************************************************************************
    For your reference I have given an example created in a lab environment I own

    ShareName - TestShare

    FolderHierarchy - TestShare
    TestShare1 TestShare2

    ManagerGroup - TestManagers

    ManagerGroupMember - adm_pslabuser1

    AccessToManagerGroup - FullControl

    UserGroup - TestUsers

    UserGroupMember - std_pslabuser2

    AccessToUserGroup - Read & Execute


    ***************************************************************************************

    Snippet 1

    TestShare has full control share permissions to everyone.
    Share and NTFS permissions are different
    The share permissions for testshare folder are inherited by its children folders testshare1 & testshare2





    Snippet2 & Snippet3

    NTFS permissions assigned to TestShare
    TestManagers - FullControl
    TestUsers - read, execute & list foldercontents





    Snippet 4

    TestShare1 NTFS permissions are INHERITED from TESTSHARE




    Snippet5

    TestShare2 I have disabled inheritance and removed all permissions except for the TestManagersGroup
    This is restricting access to the folder explicitly. Using deny is goo. But not good in every case. This way 
    I do not have to deny. I gove access but in my own way





    Snippet6

    Tested from a Win7Vm with user std_pslabuser2



    If you find this helpful, kindly mark as answer. If you have any queries, please post back as a reply. Will look forward to your feedback. Thanking You Soumyajyoti Biswas

    Saturday, September 19, 2015 5:26 AM
  • Thnaks for respond,

    Will try next week and let you know the results


    Saturday, September 19, 2015 11:21 AM
  • Would be waiting to know how it went :)

    If you find this helpful, kindly mark as answer. If you have any queries, please post back as a reply. Will look forward to your feedback. Thanking You Soumyajyoti Biswas

    Saturday, September 19, 2015 1:00 PM
  • In Soumyajyoti's steps, make sure you disable inheritance...
    Monday, September 21, 2015 2:30 AM
  • Aravindhan, has pointed it right. Snippet 5 is an important step.

    If you find this helpful, kindly mark as answer. If you have any queries, please post back as a reply. Will look forward to your feedback. Thanking You Soumyajyoti Biswas

    Monday, September 21, 2015 3:01 AM
  • Hi,
     
    How is it going? Please let us know if you would like further assistance.
     
    Thanks,
     

    Regards,

    Ethan Hua


    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com

    Thursday, September 24, 2015 3:16 AM
    Moderator
  • Point #5 did not work for me,

    I will try to use option deny

    Saturday, September 26, 2015 11:19 AM
  • Are the users able to access the parent folders? Make sure on target folder, remove the permission entries of non-manager users, and disable the inheritance.After this, remember to do a reboot, then try again.
     
    Steps on How To Restrict Access On A Shared Drive:
     
    https://auxlearning.uscg.mil/warehouse/2-2013-03-11-7w3lca6a7y0r5r0685y6/resources/controllingaccesstotheshareddrive_DHS.pdf
     
    Monday, September 28, 2015 2:01 AM
  • how is it going?
    Tuesday, September 29, 2015 10:40 AM
  • It did not worked they way the department manager need.

    They want to use this Windows shared drive as "Dropbox" for Bussness drive,

    where they have option to share data  in site dropbox drive any way they liked

    I really do not know how to help them...

    They are not ready yet to switch to Office 365 for bussness..

    I need the solution now and my Windows shared drive solution is not working....

    Tuesday, September 29, 2015 10:58 PM
  • I am not exactly sure if ntfs permissions and Dropbox work in such intense sync as you want. You didn't mention earlier this was also related to Dropbox. Let me check on that. Will get back to you on this :)

    If you find this helpful, kindly mark as answer. If you have any queries, please post back as a reply. Will look forward to your feedback. Thanking You Soumyajyoti Biswas

    Wednesday, September 30, 2015 5:28 AM