Sharing privileged for standard users

[pink0.pallino]

Hi, I am trying to give our users the ability to share their folders
inside the internal network. I don't want to put them inside any
privileged group but Users/domainUsers only.
does anybody know a way to have this thing?

thanks,
a.

 

[Lanwench [MVP - Exchange]]

Hi, I am trying to give our users the ability to share their folders
inside the internal network. I don't want to put them inside any
privileged group but Users/domainUsers only.
does anybody know a way to have this thing?

thanks,
a.

An administrator can share folders. Your users shouldn't be administrators,
and your users shouldn't have any local data to share. Seriously, rethink
this decision - it's a recipe for disaster. Only the admins should have
permission to do this, and shares should be created sensibly, not
willy-nilly all over the place.

 

[pink0.pallino]

An administrator can share folders. Your users shouldn't be administrators,
and your users shouldn't have any local data to share. Seriously, rethink
this decision - it's a recipe for disaster. Only the admins should have
permission to do this, and shares should be created sensibly, not
willy-nilly all over the place.

could you explain me why? I see only advantages giving users the
permission to share a folder. Above all the fact that one is still
standard user and not admin/power user, then to have less copies of
those files around the disk ("i cannot share, please have this copy"),
then the harass for admins to set shares for eahc computer for those
who need to synchronize with their laptop.
thanks,
a.

 

[Malke]

could you explain me why? I see only advantages giving users the
permission to share a folder. Above all the fact that one is still
standard user and not admin/power user, then to have less copies of
those files around the disk ("i cannot share, please have this copy"),
then the harass for admins to set shares for eahc computer for those
who need to synchronize with their laptop.

Because there should never been any data on the local workstations for your
users to share. All data should be on a file server, accessible to everyone
who needs access to that data. Laptop users should be using offline files
and synchronizing with the server. This way you keep control of the data
and only have to back up *one* computer and not many. You *do* have a
backup procedure in place, yes?

Malke

 

[pink0.pallino]

Because there should never been any data on the local workstations for your
users to share. All data should be on a file server, accessible to everyone
who needs access to that data. Laptop users should be using offline files

I think users cannot share their files either on the server. Sure,
they can set ntfs permissions but it's not the same thing and anyhow
I'm not interested on sharing on server but on local disk

and synchronizing with the server. This way you keep control of the data
and only have to back up *one* computer and not many. You *do* have a
backup procedure in place, yes?

sure there is a backup for files on the server but do you backup also
meedia files such as mp3/video etc? I don't if not not strictly
related to research, and this is why such files stays on local disk
and this is why one might need to share them.

thanks,
a.

 

[Lanwench [MVP - Exchange]]

I think users cannot share their files either on the server.

That's correct.

Sure,
they can set ntfs permissions but it's not the same thing

No, it isn't. It's the administrator's job to come up with a folder & share
structure that works for the company, and it's the users' jobs to make sure
they use it according to policies.

and anyhow
I'm not interested on sharing on server but on local disk

See the previous replies.

sure there is a backup for files on the server but do you backup also
meedia files such as mp3/video etc? I don't if not not strictly
related to research, and this is why such files stays on local disk
and this is why one might need to share them.

If it's data you care about and other people need, it belongs on the
server(s). If it's on a workstation for someone's personal use, it's not
company data and it doesn't get backed up or maintained.

If you insist on doing this you're going to have to make your users admins -
and you will rapidly come to understand why this is a very bad idea. Unless
this is a home network, I suggest you reconsider.

 

[Malke]

I think users cannot share their files either on the server. Sure,
they can set ntfs permissions but it's not the same thing and anyhow
I'm not interested on sharing on server but on local disk


sure there is a backup for files on the server but do you backup also
meedia files such as mp3/video etc? I don't if not not strictly
related to research, and this is why such files stays on local disk
and this is why one might need to share them.

Frankly, you've set up your work network so far outside the norm of best
practices that there really isn't any point in continuing this thread. You
seem to not have any idea of how to set up and secure a business network
and are apparently allowing your users to do anything they want. MP3 and
video files at work?! There is a high probability that your workstations
and server are already compromised.

The smartest thing you could do would be to have a computer professional
come on-site and set up your business computers properly. Since I doubt
you'll do this, I will now bow out since I will not be able to help you.

Good luck,

Malke

 

[pink0.pallino]

Frankly, you've set up your work network so far outside the norm of best
practices that there really isn't any point in continuing this thread. You
seem to not have any idea of how to set up and secure a business network
and are apparently allowing your users to do anything they want. MP3 and
video files at work?! There is a high probability that your workstations
and server are already compromised.

The smartest thing you could do would be to have a computer professional
come on-site and set up your business computers properly. Since I doubt
you'll do this, I will now bow out since I will not be able to help you.

I never said (and it wasn't needed) it's a business work but it's a
research institute where mp3/video are used for other purposes than
pure fun, but it seems to me you are not smart enough to understand
this. And yes, the idea for my question was exactly to allow people
doing simple task such as sharing without promoting them Administrator/
PowerUsers to avoid potential security risks, but again, you don't
seem so smart to understand this
I don't understand: one comes here to get a sort of help and instead
gets such replies. If you've had tarantulas for breakfast this morning
it's not my fault.
next time a "sorry I can't help you -I'm not skilled enough, it's not
possible to do, windows does not allow that.." would be sufficient to
make somebody happy for your contribution

thanks anyhow
a.

 

[Lanwench [MVP - Exchange]]

I never said (and it wasn't needed) it's a business work but it's a
research institute where mp3/video are used for other purposes than
pure fun, but it seems to me you are not smart enough to understand
this. And yes, the idea for my question was exactly to allow people
doing simple task such as sharing without promoting them
Administrator/ PowerUsers to avoid potential security risks, but
again, you don't seem so smart to understand this
I don't understand: one comes here to get a sort of help and instead
gets such replies. If you've had tarantulas for breakfast this morning
it's not my fault.
next time a "sorry I can't help you -I'm not skilled enough, it's not
possible to do, windows does not allow that.." would be sufficient to
make somebody happy for your contribution

thanks anyhow
a.

Malke is certainly skilled enough to do this, and what you ask is
technically possible, but she's given you good advice which you would be
wise to take if you yourself are not someone with a strong IT/networking
background. There is no shame in that.

Did you see my reply? You can't do what you wish without giving your users
too many rights. Keep your data centralized. Your network will be much
easier to manage, more reliable, you'll be able to back up and maintain your
data, and you'll be able to secure things properly.

 

[alaxa]

Malke is certainly skilled enough to do this, and what you ask is
technically possible, but she's given you good advice which you would be
wise to take if you yourself are not someone with a strong IT/networking
background. There is no shame in that.

technically possible? how?
She's skilled enough for sure but not so as much polite as you were,
for example. That was my complain.

Did you see my reply? You can't do what you wish without giving your users
too many rights. Keep your data centralized. Your network will be much
easier to manage, more reliable, you'll be able to back up and maintain your
data, and you'll be able to secure things properly.

things are correctly set for the most generic use of the rsources.
Everything important is kept on a centralized storage. There are
centralized backups and such amenities.
But we have to deal with the large amount of data we daily get from
instruments and local disk are the first better place where to put
them for a further analysis
Anyhow this is not the problem. All I wanted was to know if there is a
way for standard users to share a folder without doing big changes on
the network/servers
I never thought to promote users to power/administrator just for such
things (as they are in some other research institutes), but sometime I
get requests that I find reasonable from a user-point of view and I
like to investigate if it is possible to help their and my daily work.

thanks,
a.