Stuck on Permissions

[Guest pstarr.google@ussfirestorm.org]

Hello,

 

I provide IT/Network support for a K-8 private school. The school

uses a Windows 2003 server and Windows XP clients. On the server is a

shared folder that is used by workstations in a computer lab for

students to save their school assignments. These lab computers all

log in with the same user account.

 

We've recently run into the issue where students have been deleting

the assignments of other students or moving files and folders to

another folder, and I spend a significant amount of time undeleting

files, and moving the files around means the instructors are spending

additional time trying to find the missing files. In an attempt to

resolve this, I had set up an explicit delete deny for the lab account

to that folder.

 

Now we've run into another issue - the technology class has started

using Windows Movie Maker to produce short movies using pictures and

sound effects. Because of the delete deny, students have been unable

to save their work, forcing me to remove the delete deny.

 

So, I'm looking for a solution that would allow students to save movie

maker files to the network folder, while at the same time keeping them

from deleting and moving files on the server.

[Guest Harry Bates]

Re: Stuck on Permissions

 

Can you assign them home directories in ADUC? Just create a share on the

server, higlight all of the users in AD and modify their User Home

Directory. AD will create all of the individual home folders for you.

 

Harry Bates

Lockheed Martin

 

<pstarr.google@ussfirestorm.org> wrote in message

news:3c9536a5-1e85-43bb-a4db-98ea1af09b45@q39g2000hsf.googlegroups.com...

> Hello,

>

> I provide IT/Network support for a K-8 private school. The school

> uses a Windows 2003 server and Windows XP clients. On the server is a

> shared folder that is used by workstations in a computer lab for

> students to save their school assignments. These lab computers all

> log in with the same user account.

>

> We've recently run into the issue where students have been deleting

> the assignments of other students or moving files and folders to

> another folder, and I spend a significant amount of time undeleting

> files, and moving the files around means the instructors are spending

> additional time trying to find the missing files. In an attempt to

> resolve this, I had set up an explicit delete deny for the lab account

> to that folder.

>

> Now we've run into another issue - the technology class has started

> using Windows Movie Maker to produce short movies using pictures and

> sound effects. Because of the delete deny, students have been unable

> to save their work, forcing me to remove the delete deny.

>

> So, I'm looking for a solution that would allow students to save movie

> maker files to the network folder, while at the same time keeping them

> from deleting and moving files on the server.

[Guest SBS Rocker]

Re: Stuck on Permissions

 

When you say you "delete deny" what are you saying? What are you "denying".

There's really nothing special you need to do here. If the users have

"Modify" NTFS permissions on the folder, by "default" they are no able to

delete and folders or files (checkout the "advance" permissions settings for

those with "modify" access). Perhaps the folder is inheriting permissions

and when you make changes they are not applied. Please post your folder

structure and share as well as NTFS permissions and perhaps we can get a

better picture.

 

 

<pstarr.google@ussfirestorm.org> wrote in message

news:3c9536a5-1e85-43bb-a4db-98ea1af09b45@q39g2000hsf.googlegroups.com...

> Hello,

>

> I provide IT/Network support for a K-8 private school. The school

> uses a Windows 2003 server and Windows XP clients. On the server is a

> shared folder that is used by workstations in a computer lab for

> students to save their school assignments. These lab computers all

> log in with the same user account.

>

> We've recently run into the issue where students have been deleting

> the assignments of other students or moving files and folders to

> another folder, and I spend a significant amount of time undeleting

> files, and moving the files around means the instructors are spending

> additional time trying to find the missing files. In an attempt to

> resolve this, I had set up an explicit delete deny for the lab account

> to that folder.

>

> Now we've run into another issue - the technology class has started

> using Windows Movie Maker to produce short movies using pictures and

> sound effects. Because of the delete deny, students have been unable

> to save their work, forcing me to remove the delete deny.

>

> So, I'm looking for a solution that would allow students to save movie

> maker files to the network folder, while at the same time keeping them

> from deleting and moving files on the server.

[Guest pstarr.google@ussfirestorm.org]

Re: Stuck on Permissions

 

We ended up creating individual logins for the grade 6-8 students at

the school, but would still like to figure this out.

 

As for the folder structure, the folder is named and shared as

"techlab". Permission inheritance has been disabled for this folder.

Most folders inherit their permissions from this folder.

 

There are 3 user groups that have permissions assigned to this folder.

Network Administrators (my access): Full Control

Teachers: Full Control

Students: Modify

 

This folder is intended for students to be able to save their work.

Unfortunately, "kids will be kids," and students have been deleting

the work of their classmates.

 

The students all share the same login for the workstations. There are

two computer labs, one in the library (login: Library, member of:

Domain Users, Students), and one in the standalone lab (login: Lab,

member of: Domain Users, Students). This means that the CREATOR OWNER

of the documents the students create are under the Library or Lab

accounts - I believe this is where they are getting the ability to

delete from, but I could be wrong.

 

 

 

However, as I said in my previous post, Windows Movie Maker does not

play by the rules, and "deletes" the old copy of the file and creates

a new file whenever you save the document.