Userfolder access How do you do it?

staggerlee

Hi all,

currently where i work we use mapped drives based from our old novell system and sys admin guy, they basically make no sense, every department has a department drive, then any cross department drives are random letters.

With the new restructuring that is going on i was thinking of cleaning up the way the users get to files and folders..

One suggestion has been to put all department folders and all the cross department folders in one file and map that single drive to all users and just have access in permissions to restrict/allow,

another would be to keep mapped drives but does anyone have a sensible way to allocate the letters?

Any suggestions?

Thanks

S

Mojo_666

staggerlee wrote: »

Hi all,

One suggestion has been to put all department folders and all the cross department folders in one file and map that single drive to all users and just have access in permissions to restrict/allow,

That is how I do it.

phoeneous

staggerlee wrote: »

One suggestion has been to put all department folders and all the cross department folders in one file and map that single drive to all users and just have access in permissions to restrict/allow,

Or a group policy that has a logon script with case statements. This way you can read any of the ldap fields of the user profile and map a drive based on the criteria.

Devilsbane

You could just map say drive S: to be a folder that is called Departments, and then inside there have all of the folders for the different departments. Then just configure permissions if you only want a department to access their own folder.

qcomer

Devilsbane wrote: »

You could just map say drive S: to be a folder that is called Departments, and then inside there have all of the folders for the different departments. Then just configure permissions if you only want a department to access their own folder.

To further build on this you could use access-based enumeration so that they only see the folders they have permission to.

staggerlee

qcomer wrote: »

To further build on this you could use access-based enumeration so that they only see the folders they have permission to.

Thank you.. i knew there was a way to do this but couldnt for the life of me remember how...

Im leaning more to doing this than keeping with the current option.. As it is just such a mess at the moment.

Thanks for everyones input anymore ideas welcome

Devilsbane

qcomer wrote: »

To further build on this you could use access-based enumeration so that they only see the folders they have permission to.

I've seen this done before, but I don't know how to do it.

qcomer

Devilsbane wrote: »

I've seen this done before, but I don't know how to do it.

What server OS are you running? 2003? 2008?

Devilsbane

qcomer wrote: »

What server OS are you running? 2003? 2008?

I've worked with both. Currently mostly with 2003 since I'm working to get my MCSE.

qcomer

Devilsbane wrote: »

I've worked with both. Currently mostly with 2003 since I'm working to get my MCSE.

Implementing Access-Based Enumeration in Windows Server 2003 R2 good tutorial.


I need to get back on my studies also. Maybe this fall I will start back up on it.

qcomer

Any kind of update? Did this work good for you?

Devilsbane

Hey, thanks for that link. I just read it over and I will have to try it when I get home.