0
votes
0answers
33 views

Permission Refactoring Tools

Are there any products out there that can refactor permissions? I am talking about something like... Folder has users A, B, and C in it as direct permission assignments. I'd like to have a tool that ...
2
votes
2answers
204 views

Look up where a NTFS group is used

We are doing some AD clean up and migrating or deleting old AD groups and replacing them with our current naming stranded in AD. The challenge that we are running into is making sure we have the we ...
2
votes
2answers
2k views

NTFS - Domain Admins don't have permissions despite being part of the Local Administrators group

As per "Best Practices" staff in our IT department have two accounts. An unprivileged account and an account that is a member of the global Domain Admins ($DOMAIN\Domain Admins) group. On our file ...
5
votes
5answers
1k views

Protect files on NTFS volume from Domain Administrators

We're a small company with a 2008R2 domain on which we have a file server with several shared volumes. We have a number of IT staff in the domain administrators role, because effectively we're all on ...
0
votes
1answer
276 views

How to grant file MOVE permission on NTFS?

I wonder what is needed in terms of the NTFS Security permission to grant user to do file READ+WRITE+MOVE from one directory to another but NO DELETE ? Any kind of help would be greatly appreciated. ...
1
vote
1answer
6k views

Is it possible to hide folders/subfolders from users based on permissions?

Having a Windows Server 2008 R2 that has a share with lots of nested folders, I want to be able to only show certain folders to certain AD users/AD user groups. Is it possible to configure the ...
3
votes
3answers
922 views

How can I programmatically change file permissions from one AD domain user to a separate AD domain user?

We are in a colocated RackSpace facility in San Antonio, with an active directory named "SAT". We are being moved to their Dallas/Ft. Worth facility, with an active directory named "DFW". These ...
5
votes
2answers
2k views

How to prevent Domain Admins from being denied access to network folders?

As I understand it, if a user creates a folder they become the owner and can control NTFS permissions including removal of inherited permissions granted to Domain Admins. What is the best approach to ...
0
votes
3answers
191 views

Scripting share security & NTFS settings for AD2003

We will be deploying "dynamic" classrooms using SCCM, and thus will also need to create OU's and matching users and homedirs on the fly. I am currently trying to figure out how to edit the security ...
1
vote
1answer
690 views

Is there a way to use Linux & Samba Server to mimic NTFS ACL's under a Windows Domain?

Does anyone know of an up-to-date tutorial for this? I found this old doc from 2003: http://www.bluelightning.org/linux/samba_acl_howto/ . I've like to have a Linux server replace the Windows file ...
2
votes
1answer
3k views

Changing file Ownership with PowerShell 2.0

We have an issue with a file server, whenever a user account is deleted the ownership of his/her files returns to their SID number, which shows up in our report as unknown. Has anyone found a way to ...
9
votes
8answers
4k views

Is this a recommended/valid approach for file server permissions?

File servers are a fact of life in IT and I'm curious if there are any generally accepted practices (I hesitate to use the word "best" here) for how you create groups and apply permissions for ...