RE: Share Permissions

Hello,

2 address Problem:
By using ADUC you may delegate the right to create/delete Shared folder
objects to the group you like.

2 address Bonus Problem:
Do not modify the default share, just create an additional one. On the
"Sharing" tab of the drive just press "new share" and set permissions you
like.

P.s. Hope I understood your problem correctly :)

Alex
MCSE, MCSA Security, CCNA


-----Original Message-----
From: Monrad.DC@xxxxxxxxxxxx [mailto:Monrad.DC@xxxxxxxxxxxx]
Sent: Tuesday, September 05, 2006 5:39 PM
To: focus-ms@xxxxxxxxxxxxxxxxx
Subject: Share Permissions

We have several W2K3 file & print servers maintained by our server team.

I am trying to follow least privileges principles and set up permissions for
our account operators to have the minimum required rights on these servers
to do their jobs.

Done:

1. Create personal folders - No problem, NTFS rights on a folder for user
drives solves this.

2. Set permissions on personal folders - No problem - Full rights for techs
so they can set permissions.

Problem:

Create shares - As far as I can tell, only power users and administrators
have the rights to create shares.
I don't want the account operators to have the additional rights that come
with the power user group.

Bonus Problem:

We have numerous drives holding different shares based on department and
function. Giving the account operators rights to traverse through the root
share on all non -system shares would ease their job. The ability to create
a share using MMC and navigate through the root to the user share is just
one example of this. I have not been able to find a way to effectively
change the permissions on the root share (i.e. F$) without disabling all
admin shares and creating more problems after a reboot or server service
restart.

Any help would be appreciated.

Drew

---------------------------------------------------------------------------
---------------------------------------------------------------------------

---------------------------------------------------------------------------
---------------------------------------------------------------------------

Relevant Pages

  • RE: Share Permissions
    ... Subject: Share Permissions ... required rights on these servers to do their jobs. ... Create shares - As far as I can tell, only power users and ... administrators have the rights to create shares. ...
    (Focus-Microsoft)
  • RE: Share Permissions
    ... Access permissions are great, and they do add 30 seconds or so on ... Create personal folders - No problem, NTFS rights on a folder for user ... Create shares - As far as I can tell, only power users and administrators ...
    (Focus-Microsoft)
  • Re: Folder Security
    ... You have a server with shares and you ... in question from their own or other machines on the network. ... there a way to secure folder access by which machine is trying to access ... permissions apply only to network users. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: you need permission to perform this action
    ... This posting is provided "AS IS" with no warranties, and confers no rights. ... configure the global permissions for administrators. ... folder, because some folder permissions are changed by design, that's ... I did have the Administrator take ownership of the system32 folder, ...
    (microsoft.public.windows.server.general)
  • Re: Strange share rights problems
    ... This rights are for the SHARE PERMISSIONS ... This posting is provided "AS IS" with no warranties, and confers no rights. ... The problematic folder is the folder under drive X and is called ... Users who belongs to the STAFF belongs also to Domain Users. ...
    (microsoft.public.windows.server.general)