Go Back   Computer Forums > General Computing > Server Administration
Click Here to Login
Join Computer forums Today


Reply
 
Thread Tools Search this Thread Display Modes
 
Old 10-24-2007, 11:41 AM   #1
Fully Optimized
 
Kalgatha's Avatar
 
Join Date: Jun 2005
Posts: 2,102
Send a message via AIM to Kalgatha Send a message via Yahoo to Kalgatha
Default Deny User Access

My teacher in my E.A.S.T. class wants to deny each students access to other students folders. I don't know much about servers, but more than she does >.< She has all the Users under a "user" group, and close to a hundred users in it. Each user has a folder. I tried to deny access to the whole user group and set each user as the creator/owner. but that didn't work. anyhelp would be appreciated b/c i don't know what the hell im doin! Thanx guys
__________________

Kalgatha is offline   Reply With Quote
Old 10-25-2007, 04:04 PM   #2
Golden Master
 
dude_se's Avatar
 
Join Date: Nov 2004
Posts: 8,632
Send a message via AIM to dude_se Send a message via MSN to dude_se
Default Re: Deny User Access

do you not have a network admin? sounds like a hackers dream.
go to start>run>gpedit.msc and look for any suitable permissions.
if that fails you can manually set the permissions on each folder (may take a while)
other than that i dont know, im not that good with servers. wheres DJ-CHRIS when you need him
__________________

__________________
Laptop spec: ASUS X53E, i5 2430m 2.4ghz, 3gb ram, 320gb hdd, intel hd graphics, usb 3.0
dude_se is offline   Reply With Quote
Old 10-25-2007, 10:18 PM   #3
Golden Master
 
DJ-CHRIS's Avatar
 
Join Date: Apr 2006
Posts: 5,203
Send a message via AIM to DJ-CHRIS Send a message via MSN to DJ-CHRIS Send a message via Yahoo to DJ-CHRIS
Default Re: Deny User Access

Quote:
Originally Posted by dude_se View Post
do you not have a network admin? sounds like a hackers dream.
go to start>run>gpedit.msc and look for any suitable permissions.
if that fails you can manually set the permissions on each folder (may take a while)
other than that i dont know, im not that good with servers. wheres DJ-CHRIS when you need him
I'm here.

You have the right idea by restricting the NTFS permissions.

I can help you more, but I need to know more. I'll add you on AIM. EDIT: Your not their, just message djchrisremixtk on AIM.

Also by default, the creator owner in an active directory based system is administrators or the profile creator. This is a great idea, but doesn't work.
DJ-CHRIS is offline   Reply With Quote
Old 10-26-2007, 08:36 AM   #4
In Runtime
 
AllThingsSacred's Avatar
 
Join Date: Aug 2007
Posts: 302
Default Re: Deny User Access

She should begin by giving the Administrators user group access to all folders, but this should be this way by default.

This is all the information I can give you without further information, I am afraid to say. I will echo what DJ-CHRIS said and the need to ensure the NTFS permissions are correct and that no other user groups are given access to the folders other than the Administrators user group.
__________________
Patrick Moore
Born London, Live London, Die London
As a Londoner, I exercise my God given Right to do as I please
AllThingsSacred is offline   Reply With Quote
Old 10-26-2007, 11:38 AM   #5
Baseband Member
 
Bozorg's Avatar
 
Join Date: Mar 2006
Posts: 34
Send a message via AIM to Bozorg Send a message via MSN to Bozorg
Default Re: Deny User Access

You have the right idea except if you deny somebody access to something then that will cancel out the allows that you give them. So because you denied the user group access then even if they do have the right to enter the folder the deny will stop them.

Wow thats really hard to put into words

PM if you don't understand
Bozorg is offline   Reply With Quote
Old 10-27-2007, 03:07 PM   #6
Site Team
 
root's Avatar
 
Join Date: Mar 2004
Posts: 8,007
Default Re: Deny User Access

if you explicitly deny in windows then people are denied.


the obvious example should be to set deny access to everyone then allow access to the student, and then teacher.

however, as I said above in windows rthe security applying order is allow then deny, so you may allow someone but if you deny to everyone, that's applied afterwards and takes presidence.

the trick is that in windows, if you don't explicitly grant access to something then it's assumed that you mean deny access.

take the permissions for everyone, and users off of the folder, if possible only leave the folder with permissions to be viewed by the student / teach / admin if necessary, then all the other students will be restricted as well.


it's likely that the current setup is everyone can see the root folder where their individual folders are stored, and below that all the individual folders inherit directory security, (turn off inherit security as well!)
__________________
I didn’t fight my way to the top of the food chain to be a vegetarian…
Im sick of people saying 'dont waste paper'. If trees wanted to live, they'd all carry guns.
"The inherent vice of capitalism is the unequal sharing of blessings; The inherent vice of socialism is the equal sharing of miseries."
root is offline   Reply With Quote
Old 10-28-2007, 12:24 PM   #7
Golden Master
 
dude_se's Avatar
 
Join Date: Nov 2004
Posts: 8,632
Send a message via AIM to dude_se Send a message via MSN to dude_se
Default Re: Deny User Access

yea the windows permissions thing is a bit silly. took me a while to set it up just on my home pc.
btw enjoy the 4 bars root, you deserve it, good post
__________________
Laptop spec: ASUS X53E, i5 2430m 2.4ghz, 3gb ram, 320gb hdd, intel hd graphics, usb 3.0
dude_se is offline   Reply With Quote
Old 10-28-2007, 03:53 PM   #8
Baseband Member
 
nite090's Avatar
 
Join Date: Oct 2007
Posts: 21
Send a message via AIM to nite090 Send a message via MSN to nite090
Default Re: Deny User Access

In my school, they use a system call altiris or something like that. Crtl + Shift + f and guess the password. ;D It should give you some permission to do things. Or, you can do a few other things -wink wink- and adjust your permission. But you have to know what your doing :x.
nite090 is offline   Reply With Quote
Old 10-28-2007, 04:32 PM   #9
Golden Master
 
dude_se's Avatar
 
Join Date: Nov 2004
Posts: 8,632
Send a message via AIM to dude_se Send a message via MSN to dude_se
Default Re: Deny User Access

i heard some schools use securus
which is meant to be damn good. i also heard if you do anything bad, like type the word "f**k" into a word doc it logs you out that would suck
__________________

__________________
Laptop spec: ASUS X53E, i5 2430m 2.4ghz, 3gb ram, 320gb hdd, intel hd graphics, usb 3.0
dude_se is offline   Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off



All times are GMT -5. The time now is 02:27 AM.


Powered by vBulletin® Version 3.8.8 Beta 4
Copyright ©2000 - 2017, vBulletin Solutions, Inc.
Search Engine Friendly URLs by vBSEO 3.6.0