how about when I have 3 users, 1GPO, and 1 folder redirection, so user1 can only have desktop and downloads, user2 can only have documents and Pictures, and user3 can only have Videos 3:07 .
I've tried all of the above to no avail. The interesting thing is, immediately after reboot I open explorer, check properties on the folder and SEE the Shares tab. Give it a minute or two and check again and the tab disappears! I'm wondering if this is a group policy issue.
Typically what we do is create two SGs or multiple SGs with different folder path permissions and then add users accordingly. Every company I worked use that method. Now if you are in a situation where you have to do this for a very large number of users, you can automate this process using PowerShell and few other automation options. But generally, most companies would just create multiple Security Groups for each situation and then add users manually based on what permission each user should get.
I have created few videos under Win Server Admin playlist: ruclips.net/p/PLLJXhnhyaJU_idU2p-T8S_ZPgQCFszPsm&si=sxiSQSuBzISHWYC0 But I am taking things slow with my PowerShell tutorials because I want to capture Junior High School, High School students and those who are new to PowerShell. Eventually, I will be posting PowerShell intermediate and advanced tutorials where I will cover scripts like automating AD user account permissions with PowerShell, bash and other scripts. Unfortunately, this won't be coming out anytime soon due to my busy full time work schedule.
If I'm not wrong, you should have disabled inheritance at the very first share creation level and use the advanced settings for share viz full control for managers group and disable certain rights for employees group.
Thanks for your explanation. Finally I understand it.
Glad it helped!
Hi, How to edit the Special permission for the folder?? Can you make a video on it?
Great explanation
Glad you liked it
Thank you so much!
how about when I have 3 users, 1GPO, and 1 folder redirection, so user1 can only have desktop and downloads, user2 can only have documents and Pictures, and user3 can only have Videos 3:07 .
I've tried all of the above to no avail. The interesting thing is, immediately after reboot I open explorer, check properties on the folder and SEE the Shares tab. Give it a minute or two and check again and the tab disappears! I'm wondering if this is a group policy issue.
How do you make it to a SG that you have to add to user AD account with different levels of permission for that file path?
Typically what we do is create two SGs or multiple SGs with different folder path permissions and then add users accordingly. Every company I worked use that method. Now if you are in a situation where you have to do this for a very large number of users, you can automate this process using PowerShell and few other automation options. But generally, most companies would just create multiple Security Groups for each situation and then add users manually based on what permission each user should get.
@@NetITGeeks Do you have a video that shows this? Trying to learn in my personal lab and I can't find How to or I am crazy lol.
I have created few videos under Win Server Admin playlist: ruclips.net/p/PLLJXhnhyaJU_idU2p-T8S_ZPgQCFszPsm&si=sxiSQSuBzISHWYC0
But I am taking things slow with my PowerShell tutorials because I want to capture Junior High School, High School students and those who are new to PowerShell. Eventually, I will be posting PowerShell intermediate and advanced tutorials where I will cover scripts like automating AD user account permissions with PowerShell, bash and other scripts. Unfortunately, this won't be coming out anytime soon due to my busy full time work schedule.
Now how would you remove groups from folder permissions? I get an inheritance error.
If I'm not wrong, you should have disabled inheritance at the very first share creation level and use the advanced settings for share viz full control for managers group and disable certain rights for employees group.
The correct answer is provided by SS COMPUTERS. You need to disable the inheritance on first few steps.