Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Active Directory » Permissions on Shared Folders
Permissions on Shared Folders [message #337506] Mon, 07 December 2009 12:10 Go to next message
Rajnish  is currently offline Rajnish
Messages: 17
Registered: August 2009
Junior Member
I;ve win2k3 domain and 3 file servers having numerous folders on which rights
are in place..My only challenge is we have changed the login id for some
users and we have to aggign rights manually on all folder.Can this be
automated in the terms where we can assign rights thru a script. Also can a
list be fetched from the server where i can get folders on which a particular
user has rights...
Re: Permissions on Shared Folders [message #337691 is a reply to message #337506] Mon, 07 December 2009 15:09 Go to previous message
lanwench  is currently offline lanwench  United States
Messages: 1684
Registered: July 2009
Senior Member
Rajnish <Rajnish@discussions.microsoft.com> wrote:
> I;ve win2k3 domain and 3 file servers having numerous folders on
> which rights are in place..My only challenge is we have changed the
> login id for some users and we have to aggign rights manually on all
> folder.Can this be automated in the terms where we can assign rights
> thru a script. Also can a list be fetched from the server where i can
> get folders on which a particular user has rights...

A few comments:

1) With the exception of home directories or redirected folders, never ever
assign permissions to users. Always assign permissions to AD security
groups. That way you set the permissions once and you never have to do it
again.
2) If you change someone's userID you don't have to change permissions on
any folder - the SID is what matters, not the name you see.
3) XCACLS can be useful when setting permissions (google it). .
4) Never assign different permissions under shared folders. Meaning, if
\\server\share1 is set up with certain NTFS permissions at that level, they
should be consistent throughout the subfolders. That way you don't end up
with \\server\share1\subfolder needing different permissions which are
really irritating for the admin to maintain.

I don't know of any reporting tools but I'm not a scripting person. Someone
else will likely post.
Previous Topic:User permissions in AD 2003
Next Topic:How to enumerate a domain group using LDAP?
Goto Forum:
  


Current Time: Wed Jan 17 04:15:10 MST 2018

Total time taken to generate the page: 0.01952 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software