Granting user create share directory permission

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hi,

In domain controller, apart from granting user server operators or
administrators group, is there another way to let user create folder share
when logging in the server locally? For instacne, modifying registry key /
group policy.
Thanks
 
In
frankyhpm said:
Hi,

In domain controller, apart from granting user server operators or
administrators group, is there another way to let user create folder
share when logging in the server locally? For instacne, modifying
registry key / group policy.
Thanks
Click to expand...

I don't believe so. I personally wouldn't want it to happen,
anyway.....what's your goal, and how often is this request coming up? I like
to control shares on the server...wouldn't want to deal with the mess if
there were a lot of cooks in that particular kitchen.
 
Thanks for your response.
My rationale is this: my company has several remote offices. Each remote
office has 2 DCs. All DCs are under the same domain. For each remote office,
one of the DC also acts as file server. I don't want remote office
administrator to have full control on DC, but I want them to have right to
create folder share for their own usage. If I grant server operators to them,
they have access permission such as login and shutdown other DCs which are
not under their administration. I know that I can trim down server operators
privilege, but it is hard to do so
 
In
frankyhpm said:
Thanks for your response.
My rationale is this: my company has several remote offices. Each
remote office has 2 DCs. All DCs are under the same domain. For each
remote office, one of the DC also acts as file server. I don't want
remote office administrator to have full control on DC, but I want
them to have right to create folder share for their own usage. If I
grant server operators to them, they have access permission such as
login and shutdown other DCs which are not under their
administration. I know that I can trim down server operators
privilege, but it is hard to do so
Click to expand...

Delegate AD permissions based on their specific OU.
 
This is basically what I am doing now. However, as I know, you cannot set
permission for allowing user to create folder share. Could you describe in
more detail? Thx
 
In
frankyhpm said:
This is basically what I am doing now. However, as I know, you cannot
set permission for allowing user to create folder share. Could you
describe in more detail? Thx
Click to expand...

You can make sure they don't have rights to do anything at all on any
server/DC - I'm not sure how granularly you can control anything on their
*own* OU/DCs. Sorry. Perhaps posting in
microsoft.public.windows.server.active_directory will get you more help....
 
Lanwench, Thanks for your help anyway

Lanwench said:
In

You can make sure they don't have rights to do anything at all on any
server/DC - I'm not sure how granularly you can control anything on their
*own* OU/DCs. Sorry. Perhaps posting in
microsoft.public.windows.server.active_directory will get you more help....
Click to expand...
 
Back
Top