Proper sharing on a domain controller

[dsmcd]

Hello...

I've been asked to configure a Domain Controller and I'm unclear on proper
sharing technique for the directories. My setup is very simple, very vanilla.
I'm sure I could hobble a sharing structure that would work, but I'd prefer to
be proper this time around.

I'll have one Master folder where all files on the fileserver are kept. Within
that Master folder I'll have several sub-folders for assorted users, groups of
users etc. Nothing fancy. I'll be sharing the Master folder but only I will
have the root folder assigned as a mapped drive. Each sub-folder will be shared
appropriately, given your help.

1) What should the Share Permission be for the Master folder? The Security
Permissions? What would the inherited permissions be?
2) What should the Share Permissions be for the sub-folders? The Security
Permissions? What would the inherited permissions be?

Any suggestions?

Thx,
D.

 

[Herb Martin]

Hello...

I've been asked to configure a Domain Controller and I'm unclear on proper
sharing technique for the directories. My setup is very simple, very vanilla.
I'm sure I could hobble a sharing structure that would work, but I'd prefer to
be proper this time around.

I'll have one Master folder where all files on the fileserver are kept. Within
that Master folder I'll have several sub-folders for assorted users, groups of
users etc. Nothing fancy. I'll be sharing the Master folder but only I will
have the root folder assigned as a mapped drive. Each sub-folder will be shared
appropriately, given your help.

1) What should the Share Permission be for the Master folder? The Security
Permissions? What would the inherited permissions be?

The NTFS permissions should be PRECISELY what each GROUP
of users needs to do their work.

The same should set (similar permissions) on the SHARE itself.

We cannot tell you what your users need but if a single user needs
access to their own folder and others from that users group need
READ on those files, you give one FC and the Group READ.

If others should not READ, you give only the user the access to their
own folder.

2) What should the Share Permissions be for the sub-folders? The Security
Permissions? What would the inherited permissions be?

Whatever the user needs, and no more.

Any suggestions?