Corporate File control

From: Milton Bliss (milton.bliss_at_sunwestmanagement.com)
Date: 03/09/04 

Date: Mon, 8 Mar 2004 22:59:44 -0800

two questions

1) who should control user access rights in a file server? IT or data
owners?

2) where can if find a document that describes all the NTFS setting in
IMMENSE detail? There a dozen little setting I only generally understand.

mydoom.f came visiting 2/24/4, two weeks later my systems are recovered

The virus was effective at deleting many files because I give most people
high permissions on the file server. This is because I do not understand the
settings, nor have I taken the time to ascertain the users actual needs. It
is easier to give them all rights and not worry about it. - I'm worried now.

I proposed to make each department head administer file permissions within
their department's data.

My boss say's "too many cooks spoil the soup"

What is the best practice? It is true the department heads are busy
non-technical accountants, marketers, and nurses. Teaching them the minutia
of NTFS permissions would be challenging. Convincing them to maintain the
permissions concerns me. Further, does Active Directory provide me a way to
allow the Marketing director to add/delete people to/from the
MarketingSecurity group? Then does NTFS allow me to give that same Marketing
director control the exact rights each security group has in a specific set
of directories?

On the other hand, I certainly don't have time. Am I better off hiring a
clerk to maintain AD and NTFS for the entire company?

The second question of course is the technical detail, where can I find good
documentation on NTFS settings? I'll need to know what the settings do
whether I use them, teach them to department heads or a clerk.

I am grateful for direction of the sages.

Relevant Pages

  • Corporate File control
    ... high permissions on the file server. ... settings, nor have I taken the time to ascertain the users actual needs. ... is easier to give them all rights and not worry about it. ... of NTFS permissions would be challenging. ...
    (microsoft.public.win2000.file_system)
  • Re: Corporate File control
    ... > high permissions on the file server. ... > settings, nor have I taken the time to ascertain the users actual needs. ... > of NTFS permissions would be challenging. ...
    (microsoft.public.win2000.file_system)
  • Re: Corporate File control
    ... > high permissions on the file server. ... > settings, nor have I taken the time to ascertain the users actual needs. ... > of NTFS permissions would be challenging. ...
    (microsoft.public.security)
  • Re: Utility/report for effective NTFS rights for a single user/group?
    ... that can determine the effective NTFS rights for a user or a group? ... Technically Rights and Permissions are two distinct things in NT-class ... simplistic in that you have to evaluate each folder individually. ...
    (microsoft.public.windows.server.general)
  • Re: Setting rights by Outlook properties vs. AD
    ... This posting is provided "AS IS" with no warranties, and confers no rights. ... 60Subject: Re: Setting rights by Outlook properties vs. AD ... 60One clarification--the Mailbox Rights settings in AD also control who can ... 60> Microsoft Online Support Engineer ...
    (microsoft.public.exchange2000.general)
Loading