Permission sharing settings in LAN

Sometimes we need to share a folder on the server to enable different LAN users to browse and edit the folder as permitted. For example, share a folder named "shared Document", which contains three directories: contract, inventory, and paper. Someone can open "shared Document", and someone cannot open it. The people who open this folder can see these three subdirectories, but some can only browse the contract folder, and some cannot open this folder. Someone can edit the contract folder. Someone cannot edit it. And so on. What should I do?

This involves the relationship between shared permissions and security permissions. Shared permissions can control network access, but do not control local access. They are suitable for any partition, but have few permissions. NTFS security permissions can be used to control access to the local machine and the network. They are suitable for precise control. Therefore, we use the combination of these two permissions.

The procedure is as follows:

1. To allow users of the system to access this shared folder, we need to create a system user group (smp_all_view) on the server ), this group contains all users using the system (a, B, c, d, e, f, g, x, y, z), where abcdefg can be viewed, XYZ can edit the folders managed by them. Then, set "shared document" to full control of smp_all_view (if not, XYZ cannot manage the desired document), and use security permissions for fine-grained control.

2. Set the Security Attribute of "shared Document", delete all user groups, and add administrators and smp_all_view ). In this way, only network users in the smp_all_view group can open this folder.

3. Modify the security attributes of the three sub-directories. All security permissions are set to not inherited. For example, in the contract folder, in order for someone to modify it, someone can only browse it. You need to create two user groups, smp_hetong_view and smp_hetong_edit, and change the Security Group of the Contract folder to administrators and the two groups, the permissions are browser and full control. If X can modify the folder, add X to the smp_hetong_edit group. If ABC can browse the group, add ABC to the smp_hetong_view group. The other Several folders are in turn.

4. Follow these steps to share the permissions of files on the LAN.