Clever permission management for public computers

Due to the shortage of teachers in the school, I managed office computers in the office while serving as a network administrator. Due to the busy work at ordinary times and loose management of office computers in the office, teachers can use this computer to print data. This has caused many problems, such as the Random storage of personal files and accidental deletion of important files from the school. To solve this problem, I plan to use some settings to achieve this goal: Generally, the teacher can only write to the specified folder, but only have read permission to other folders. Only Administrators or specific users have read and write permissions on all folders.

Without other tools, the Windows 9X system obviously cannot implement these functions.

. Considering the high configuration and system stability of the machine, we decided to replace the system with Windows Server 2003. By setting different permissions for different users, we achieved this goal successfully (note: folder partition must be in NTFS format ).

Step 1: Add users and groups

　　1. Add a user

Log On As Administrator, right-click my computer on the desktop, and select Manage ". In the displayed "Computer Management" dialog box, expand the "local users and groups" directory. Right-click the "user> new user" command in the expanded Directory to open the "new user" dialog box. In the related input box, enter the username bangong and password, cancel the "user must change the password next time" option, and select "user cannot change the password" and "Password Never Expires, click "CREATE. The next "new user" dialog box is displayed, and several users (such as chuyin) are added as needed ). After the creation, click "close" to end adding the user (1 ).

Figure 1

　　2. Add Group

To facilitate management, we 'd better create an independent group and add the user we just created to this group. In the dialog box shown in figure 1, right-click "group" and select "new group ". In the "Create group" dialog box that appears, enter the group name gongyong and click "add" to open the "Select User" dialog box. In the "Enter object name to select" box, type the created user bangong and click "OK. In this case, you can find that a member named bangong is displayed in the "Create group" dialog box. Add other users in the same way, and then click "create> close" (2 ).

Figure 2

Tips

　　When adding a group member, you can also click "Advanced> Search now" in the "Select User" dialog box. In the "Search Results" list, click the user you just created and click "OK" to add the user.

Step 2: Set permissions

　　After creating the users and groups we need, we need to grant different permissions to these users or groups. Suppose there are two folders on the machine: "instructor thesis" and "student achievement". We want all the members of the gongyong group to have the permission to read and write the "instructor thesis" folder; the "student scores" folder only grants the read and write permissions to the bangong user, while other members of the gongyong group only have the read permission. The implementation method is described as follows:

　　1. gongyong group permission settings

Right-click the instructor thesis folder and choose Properties ". In the "instructor thesis attributes" dialog box that appears, switch to the "Security" tab. Click Add to open the select user or group dialog box ". In the enter object name to select box, type the group name gongyong and click OK. Next, select write permission in the gongyong permission selection box, and click OK to apply the permission (3 ).

Figure 3

2. bangong user permission settings

Set the gongyong group's access permission to "student scores" in the same way, but do not select the "write" permission. In the "Student Score attributes" dialog box, click the "add" button again. In the "Enter object name to select" box, type the user name bangong and click the "OK" button. Then, select write in the bangong permission selection box and click OK to make the permission take effect.

Tips

　　Although the system will automatically add new Users to the Users group, for folders, the permissions of the gongyong group we set are the same as those of the Users group or higher than those of the Users group, therefore, you do not have to worry about unauthorized access.

Step 3: Use

　　Assume that a teacher logs on to the system as another user (such as chuyin) in the gongyong group, then he has the read, delete, and write permissions only in the "instructor thesis" folder, in the "student scores" folder, only files can be read. If a teacher logs on to the system as bangong, he has read and write permissions on both folders.

Through the preceding operations, the gongyong group and the bangong group are granted different access permissions for the same resource. Of course, the examples mentioned in this article are relatively simple. You can set more reasonable access permissions for hard disk resources based on the actual situation. The preceding method is also applicable to Windows 2000 and XP.