Need CREATIVE advise from Gurus - What is the best way to allow sharing of files simultaneously between users with flexibility of removing privileges on the go?

hi everyone,

i have situation requires expert creative suggestions.

we have windows 2008 r2 server users using rdweb. have folders each user permissions set user access.

we have program allows multiple users work on same file @ same time. give supervisor access change privileges on user folders allow other users access files messy solution. supervisor not person , messes each time requiring reset privileges. problem have add privilege in morning , remove in evening example no standard pattern.

so, suggest best way allow supervisor add or remove privileges to specific users? there programs can run not complicated windows folder acls and privileges? or maybe allow users share short-cuts but find way limit them?

thanks

hi,

we not have program or icon can run automatically grant permission. easy way tell deploy script along icacls commands.

for example, add user's acl specific file, can use following command:

icacls filename /grant sid:perm     e.g.   icacls c:\user.txt /grant xxx\aaa:r  -> gives xxx\aaa read permission on file specified.

to remove user's acl file, can use following command:

icacls filename /remove sid      e.g  icacls c:\user.txt /remove xxx\aaa   -> removes allow , deny acls xxx\aaa file specified.

you can save acl list txt file , restore acl backup when adding users account acl achieve our goal.

to save acls files in c:\windows directory , subdirectories aclfile file, type:

icacls c:\windows\* /save aclfile /t

if want restore acl aclfile, can type command below:

icacls c:\windows\ /restore aclfile

for more infomration icacls command, please refer following article:

icacls: http://technet.microsoft.com/en-us/library/cc753525(ws.10).aspx

regards,

denny

---

please remember click “mark answer” on post helps you, , click “unmark answer” if marked post not answer question. can beneficial other community members reading thread.

Windows Server  >  Security