One file/directory resource, two groups. For instance, a share: \\fileserver\share and a set of directories \\fileserver\share\dir1 and \\fileserver\share\dir2
I'll have 4 groups: FileserverShareDir1-RO, FileserverShareDir1-RW, FileserverShareDir2-RO and FileserverShareDir2-RW The share will have full permissions for Domain Users (not Everyone), and the directory to which the share is applied (\\fileserver\share) will have Read permissions, "This Folder Only", for Domain Users. I then apply the permissions for the four groups above, with appropriate permissions (Read for the RO group, and Modify for the RW group) to the directories below, with "This Folder, Subfolders and Files". This assumes that you won't be applying permissions below the \\fileserver\share\dir1 level. If that's not the case, then add groups and adjust permissions as needed. There's a bit more to it than that, but that's the gist of it. Kurt On Fri, Mar 19, 2010 at 06:57, Jason Morris <[email protected]> wrote: > I’m looking at cleaning up some of our more ornery areas and want to know if > anybody has some opinions/real world experience they’d be willing to share. > From my perspective everything is working ok speed-wise but I want to know > what other people are doing. > > > > We have a series of folders in one share that not all users with access to > the share will be utilizing. Some will have “Folder A / Folder B / and > Folder C” but not “Folder D / Folder E / and Folder F”. And others will be > mixing and matching. > > > > I prefer to give groups permissions to the folders and put the users in the > groups. But this might mean there will be 10 groups on Folder A. This might > also mean User George will be a member of 20 groups. This is how I have it > now and it’s working ok speed-wise. (it’s ornery because we’ve had requests > here and there for individuals to access a folder and we’ve had to tweak > security for the individual user) > > > > Is it better/faster to have groups checked in the ACL or have it some other > way? > > > > Inquiring minds want to know. > > ------------------------------------------ > > Jason Morris > > MJMC, Inc. > > P: 708-225-2350 > > F: 708-943-9015 > > > > > > > > ------------------------------------------------------------------------------------------ > The pages accompanying this email transmission contain information from > MJMC, Inc., which > is confidential and/or privileged. The information is to be for the use of > the individual > or entity named on this cover sheet. If you are not the intended recipient, > you are > hereby notified that any disclosure, dissemination, distribution, or copying > of this > communication is strictly prohibited. If you received this transmission in > error, please > immediately notify us by telephone so that we can arrange for the retrieval > of the original > document. > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
