Windows XP Pro Permissions

SiriusB · 9 Feb 2007 at 17:01

Hi

I am trying to set up a small office server that will hold everything from the accounts to individual employee backups. Some of the data is sensitive and should not be accessible by certain employees.

Because certain folders will have more than one set of permissions [depending on who is accessing it] separate accounts need to be created. Is there any way of adding these permissions without the need for separate local accounts?

SiriusB

m4cc45 · 9 Feb 2007 at 17:08

Not really.

It depends how you would like the access set up.

From your post I'm assuming you are not using a domain only a PC using the accounts - this incurs all kinds of problems as if the accounts on the local PC and the PC that you're using as a server don't match then you'll have to enter a username and password each time.

Might be an idea to allow everyone permission to the main folder and lock the folders off there with permissions (if only a few people need access it will make it a lot less time consuming).

Basically need more details of what your enviornment is before it can be fully answered.

M.

scratch · 9 Feb 2007 at 17:23

How many users are we talking here? The way you're planning on going about it could prove time-consuming as like m4cc45 says, you'll have to keep the accounts on the server synchronised with those on the individual PCs. Every time somebody changes their password on their PC they will have to also set the password on the server to match.

Another thing to consider is that if anyone wants to login to a PC other than their usual one, you'll have to set up a user account on that PC for them.

Andy

SiriusB · 10 Feb 2007 at 22:35

Yeah I realise the problems involved which is why I asked if there was any way around it.

There are only likely to be 10 or so people requiring access to files on the server but that is a lot of accounts to manage especially if people don't let me know if they have changed their accounts. People also use their own laptops too so there is no real standardisation of account names or anything.

I was hoping for maybe some third party software that anyone could recommend that would avoid the need to create lots of accounts.

Freakish_05 · 10 Feb 2007 at 22:56

1) I'd create separate user accounts to anyone requiring access to the files on the server.
2) You can then set permissions per user account.
3) Users can then map network drives to the folders they need to access using the username and password created at step 1.

HTH

SiriusB · 10 Feb 2007 at 23:09

Thanks for that but that is kinda what I am trying to avoid. If there were only a few people then it wouldn't be a problem, but I would rather not have 10+ local user accounts on the server.

SiriusB

SiriusB · 28 Feb 2007 at 11:20

Hey guys

OK so decided to just go ahead and do the Peer-to-Peer method with creating an account for everyone on the server machine.

The problem I am having now is setting the correct NTFS permissions.

Basically I want everyone on the network to be able to access Sales but only be able to read documents.

Two maybe three people I want to have Full Control of the Sales folder as these people are responsible for updating data, organizing it and removing old data.

NTFS permissions have to be used as the server wont be in a secure location - so anyone in the office could jump onto the server machine and use it [not that they would but you never know].

I thought all this would be easy to set up, but I am finding that people who should have full control - dont.

The problem starts with I think me not fully knowing what all the different groups are. Administrators and Users are fairly straightforward.. but what about some of the others? I have recently found a Network group... is that a group I should be setting permissions for too?

I think the easiest way for someone to explain this is if I gave an example folder and users and someone show me what permissions they would set...

Folder: Sales [share permissions are set to allow all and sundry as we are using NTFS permissions to control access.

User: Bob [He can list the contents of Sales but can only READ documents]

User: Harry [He has full control over all the files in Sales]

Both users will be accessing Sales from their own computers over the network. They have a matching user account on the server.

So, using the above how would you guys go about setting the permissions?

Thanks for any help as everywhere I look on Google it is the same old "and just set the permissions, job done" with no explanation