Permissions

[joedotm]

Dear all,

Here's the scenario:
PC1-A
PC2-B
PC3-C

PC00-Mgr1
PC01-Mgr2

PC are the PCs
A, B, C, Mgr1, Mgr2 are the user accounts on each.


I usually right click on the drive on each PC, advanced sharing, share with permission than go to the security tab to define users to have acces..
When I write 'everyone' then check name, it work fine but all have access to all which I don't want.

If I write let's say Mgr1 or Mgr2 then check names to give them permission, it does not find any of those user account.

I think I missed something here.


I need Mgr1 and Mgr2 to have full access to PC1-A, PC2-B, PC3-C;
I don't want PC1-A, PC2-B, PC3-C to have any access to PC00-Mgr1, PC01-Mgr2

I need PC00-Mgr1 and PC01-Mgr2 to have full access to each others.

Could you please advise.

Thank you

 

[Solidwave]

Windows sharing permissions are counterintuitive and unnecessarily complicated.

In order to access a file over the network, a user must have permissions according to both the advanced sharing permissions and the underlying file or folder permissions. To put it plainly, just because someone has full control under share permissions does not mean they will have any access to all files under the share--they're still subject to file system permissions.

The least confusing way to handle network share security is to give the "everyone" security principle full control under share permissions and restrict access to individual files and folders using filesystem permissions. Since you have to have your filesystem permissions set correctly anyway to protect against unauthorized access by someone physically sitting at a computer, you might as well use those permissions to control network access as well without adding another layer of complexity through share permissions.

 

[joedotm]

Hi Solidwave,

I'll go for your advice: Everyone in security and specific users in file permissions and get back to you.

Thanx

 

[joedotm]

Hi,

I gave permission (share, security tab) to everyone;
I right clicked the folder I need to give 'specific people', opened a window and wrote the name (of the PCs then of the users) but it did not find it.

 

[Solidwave]

Are you trying to learn how to administer a Windows network or are you trying to setup security on an existing small business network? If you're trying to administer a network, I strongly suggest you hire someone who knows what they're doing because what you don't know can cost you a lot of money. If you're trying to learn, then it's time to get a textbook or take a course.