What I do with my clients in that space is: [1] there is an overall Shares folder, e.g., \\fileserver\shares that contains all subshares. Authenticated Users/Everyone has Modify on the share. NTFS permissions are per folder [2] there is a departmental folder \\fileserver\shares\Accounting<file:///\\fileserver\shares\Accounting>. [3] there is a hidden share Accounting$ that the Controller and her designee have FC over. In the NTFS permissions, they have Modify on the folder itself and FC on all child objects.
This allows the controller and her designee to set security however they wish. There are some third party apps out there that have granular control that you can allocate (Varonis comes to mind) permissions to, but I think for most people the built-in tools are just fine. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Sobey, Richard A [mailto:[email protected]] Sent: Thursday, March 17, 2011 9:21 AM To: MS-Exchange Admin Issues Subject: RE: DL managedBy - cannot add a DL to this field? Aye, multiple users is ok, and it looks like we'll have to go down that route. Anyway, it isn't just file shares. Most departmental DLs are managed by more than one user and it's easier to use a DL that customers can update rather than come to the IT team when they want to add/remove authorised senders or list editors. But since you asked... the DLs are added to the ACL of shared home directory space in some circumstances, allowing departments to control access to that resource. Thanks Michael. Richard From: [email protected] [mailto:[email protected]] On Behalf Of Michael B. Smith Sent: 17 March 2011 13:16 To: MS-Exchange Admin Issues Subject: RE: DL managedBy - cannot add a DL to this field? It's by design. I filed a request for it to be changed for v.Next, but I won't find out whether the team listened until the same time other beta testers will. You CAN add multiple users to managedBy in Exchange 2010. That wasn't possible in Exchange 2007. How do you use this for controlling access to file shares? There may be another way to accomplish what you want. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Sobey, Richard A [mailto:[email protected]] Sent: Thursday, March 17, 2011 9:12 AM To: MS-Exchange Admin Issues Subject: DL managedBy - cannot add a DL to this field? All, We've just found a really serious problem with Exchange 2010. It seems that you cannot add another DL to the "managedBy" property for a DL. We use this extensively here for controlling access to file shares. managedBy works fine if you just want to add a mailbox user etc. Is this by design or is there some switch we can flick to allow us to do this? Cheers Richard --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe exchangelist
