Security And Permissions

[ddg5006]

First let me say hello to all as I am a new member here. I look forward to learning all that I can from the knowledgeable people in this community.

Now to my issue, I am a new administrator at a school where there is a server and I don't really have that much server experience but I'm trying to learn as I go. The server and all that good stuff was already setup when I came in to take over so, that part is already done. What I am having trouble with is that teachers each have a folder on a shared drive on the network that the students save work to. Now here is where things get difficult for me. The teachers want students to be able to save and read the files but not to delete them. Now i know that this sounds like a simple issue but its not working for me. I went into the security and permissions page and changed that access so that users logged into "Student" would not be able to delete the files, using the advanced permissions page i selected deny for "delete" and this did accomplish the task somewhat, but now the students can't save to it either. It says user "Student" doesn't have the required permission to modify this folder, please contact your administrator. Now I went back in and made sure that the user had permission to modify the folder and whatnot but still made sure that the delete was checked under deny. This still did not resolve the issue. Please if anyone can help me I would greatly appreciate it. Thanks in advance and I look forward to being a active member of the community!

 

[ICTCity]

Hi,

Can you please post the follwing pictures?

Right click on "root" folder > properties > security
Right click on "root" folder > properties > security > advanced
Right click on "root" folder > properties > security > advanced > EFFECTIVE PERMISSION and select a user which SHOULD be able to write to that folder then post resutls.

The the steps above also for the specific folder.

Let's say:

D:\MyFileServer\Folder1

Where MyFileServer is your ROOT folder and Folder1 is the specific folder.

Cheers

 

[ddg5006]

Hi,

Can you please post the follwing pictures?

Right click on "root" folder > properties > security
Right click on "root" folder > properties > security > advanced
Right click on "root" folder > properties > security > advanced > EFFECTIVE PERMISSION and select a user which SHOULD be able to write to that folder then post resutls.

The the steps above also for the specific folder.

Let's say:

D:\MyFileServer\Folder1

Where MyFileServer is your ROOT folder and Folder1 is the specific folder.

Cheers

Sure I'll get to doing that, just give me a lil, thanks for you help.

 

[ddg5006]

These are the pics you requested for the first "Root" folder.

I should tell you at this point I undid all the changes that I made because it wasn't letting people save so I had to undo it while I figured out why it wasn't working.

 

[ddg5006]

Here are the pics for that specific folder that I want the students to be able to save to but not delete from.

 

[ICTCity]

Ok, I don't know which permissions are still in place, so... re-do everything.

On the FOLDER - TEACHER1 set the following permissions:

Select the SECURITY TAB, select ADVANCED, select CHANGE PERMISSIONS under Permissions tab, click ADD and select the TeacherGroup:

Select everything EXCEPT:
Full Control, Change Permissions, Take ownership.

Click OK.
Now do the same thing for group STUDENTS and select all permissions EXCEPT:
Full control, Delete, Change Permissions, Take ownership.

Click OK.


Now you should UN-tick INCLUDE INHERITABLE PERMISSIONS... but everything depends HOW do you map drives. With the permissions given above, all the teache can write and do almost all on that folder, students only read, save and modify.

 

[ddg5006]

Ok, I don't know which permissions are still in place, so... re-do everything.

On the FOLDER - TEACHER1 set the following permissions:

Select the SECURITY TAB, select ADVANCED, select CHANGE PERMISSIONS under Permissions tab, click ADD and select the TeacherGroup:

Select everything EXCEPT:
Full Control, Change Permissions, Take ownership.

Click OK.
Now do the same thing for group STUDENTS and select all permissions EXCEPT:
Full control, Delete, Change Permissions, Take ownership.

Click OK.


Now you should UN-tick INCLUDE INHERITABLE PERMISSIONS... but everything depends HOW do you map drives. With the permissions given above, all the teache can write and do almost all on that folder, students only read, save and modify.

Since it's just a small server, the drive is mapped like this. Hdd on server ---> computers on domain automatically get "Saved Work folder" mapped as the "Z:\" drive. Inside this folder is where I don't want them to have access to delete but should be able to save.

 

[ICTCity]

So, UN-tick Allow inheritable permissions...

 

[ddg5006]

To make this easier for the both of us let me suggest this, I'll just start with a new folder scratch, what exactly do i need to do because I tried what you outlined in the previous post and it didn't really work out.

 

[ddg5006]

So, UN-tick Allow inheritable permissions...

I did un-check it, stil not really working.

 

[ICTCity]

Exactly...

Teachers can write?
Who can't do what?

 

[ddg5006]

so when i have it like this it still doesn't work, to a point i mean. So now the "student" can't delete but also now they can't save either. When i try to save from a user account it says "you don't have permission to modify files in this network location" please contact your administrator. even though i have it selected so they can modify just not delete.

 

[ICTCity]

But teachers are working fine...

Let the permissions as they are now and post a print screen of EFFECTIVE PERMISSION for users on that folder.

 

[ddg5006]

i'm not sure if the teachers are working fine, I would assume so because the only thing that is causing the issue is when i remove the delete permissions from the user, then it gives me that message.

 

[ICTCity]

ok anyway post that screen thx.