Stuck on Permissions

  • Thread starter Thread starter pstarr.google@ussfirestorm.org
  • Start date Start date
P

pstarr.google@ussfirestorm.org

Guest
Hello,

I provide IT/Network support for a K-8 private school. The school
uses a Windows 2003 server and Windows XP clients. On the server is a
shared folder that is used by workstations in a computer lab for
students to save their school assignments. These lab computers all
log in with the same user account.

We've recently run into the issue where students have been deleting
the assignments of other students or moving files and folders to
another folder, and I spend a significant amount of time undeleting
files, and moving the files around means the instructors are spending
additional time trying to find the missing files. In an attempt to
resolve this, I had set up an explicit delete deny for the lab account
to that folder.

Now we've run into another issue - the technology class has started
using Windows Movie Maker to produce short movies using pictures and
sound effects. Because of the delete deny, students have been unable
to save their work, forcing me to remove the delete deny.

So, I'm looking for a solution that would allow students to save movie
maker files to the network folder, while at the same time keeping them
from deleting and moving files on the server.
 
Re: Stuck on Permissions

Can you assign them home directories in ADUC? Just create a share on the
server, higlight all of the users in AD and modify their User Home
Directory. AD will create all of the individual home folders for you.

Harry Bates
Lockheed Martin

<pstarr.google@ussfirestorm.org> wrote in message
news:3c9536a5-1e85-43bb-a4db-98ea1af09b45@q39g2000hsf.googlegroups.com...
> Hello,
>
> I provide IT/Network support for a K-8 private school. The school
> uses a Windows 2003 server and Windows XP clients. On the server is a
> shared folder that is used by workstations in a computer lab for
> students to save their school assignments. These lab computers all
> log in with the same user account.
>
> We've recently run into the issue where students have been deleting
> the assignments of other students or moving files and folders to
> another folder, and I spend a significant amount of time undeleting
> files, and moving the files around means the instructors are spending
> additional time trying to find the missing files. In an attempt to
> resolve this, I had set up an explicit delete deny for the lab account
> to that folder.
>
> Now we've run into another issue - the technology class has started
> using Windows Movie Maker to produce short movies using pictures and
> sound effects. Because of the delete deny, students have been unable
> to save their work, forcing me to remove the delete deny.
>
> So, I'm looking for a solution that would allow students to save movie
> maker files to the network folder, while at the same time keeping them
> from deleting and moving files on the server.
 
Re: Stuck on Permissions

When you say you "delete deny" what are you saying? What are you "denying".
There's really nothing special you need to do here. If the users have
"Modify" NTFS permissions on the folder, by "default" they are no able to
delete and folders or files (checkout the "advance" permissions settings for
those with "modify" access). Perhaps the folder is inheriting permissions
and when you make changes they are not applied. Please post your folder
structure and share as well as NTFS permissions and perhaps we can get a
better picture.


<pstarr.google@ussfirestorm.org> wrote in message
news:3c9536a5-1e85-43bb-a4db-98ea1af09b45@q39g2000hsf.googlegroups.com...
> Hello,
>
> I provide IT/Network support for a K-8 private school. The school
> uses a Windows 2003 server and Windows XP clients. On the server is a
> shared folder that is used by workstations in a computer lab for
> students to save their school assignments. These lab computers all
> log in with the same user account.
>
> We've recently run into the issue where students have been deleting
> the assignments of other students or moving files and folders to
> another folder, and I spend a significant amount of time undeleting
> files, and moving the files around means the instructors are spending
> additional time trying to find the missing files. In an attempt to
> resolve this, I had set up an explicit delete deny for the lab account
> to that folder.
>
> Now we've run into another issue - the technology class has started
> using Windows Movie Maker to produce short movies using pictures and
> sound effects. Because of the delete deny, students have been unable
> to save their work, forcing me to remove the delete deny.
>
> So, I'm looking for a solution that would allow students to save movie
> maker files to the network folder, while at the same time keeping them
> from deleting and moving files on the server.
 
Re: Stuck on Permissions

We ended up creating individual logins for the grade 6-8 students at
the school, but would still like to figure this out.

As for the folder structure, the folder is named and shared as
"techlab". Permission inheritance has been disabled for this folder.
Most folders inherit their permissions from this folder.

There are 3 user groups that have permissions assigned to this folder.
Network Administrators (my access): Full Control
Teachers: Full Control
Students: Modify

This folder is intended for students to be able to save their work.
Unfortunately, "kids will be kids," and students have been deleting
the work of their classmates.

The students all share the same login for the workstations. There are
two computer labs, one in the library (login: Library, member of:
Domain Users, Students), and one in the standalone lab (login: Lab,
member of: Domain Users, Students). This means that the CREATOR OWNER
of the documents the students create are under the Library or Lab
accounts - I believe this is where they are getting the ability to
delete from, but I could be wrong.



However, as I said in my previous post, Windows Movie Maker does not
play by the rules, and "deletes" the old copy of the file and creates
a new file whenever you save the document.
 
Back
Top