Windows server r2 setting permissions in DC

One Windows Server R2 standalone server +ad (Active Directory) =DC (domain controller)

DC (domain controller) unified management, C/s structure

Working Group: Decentralized management, peer network

Test environment: One WINDOWS2008DC, one win7,win7 join domain

Case: t271 Company is a high-tech company, there are 4 departments (technical department, Finance Department, marketing department, manager department), now the company to establish a file server (in order to save costs, and DC put together), for the storage of the company's departments folder, and in the Department folder to create a departmental employee personal folders, How should it be implemented?

The specific requirements are as follows:

1, managers and administrators can arbitrarily change all departmental documents;

2, other departments can not view the Finance Department and manager documents;

3, Technical Department and marketing department to be able to view each other but can not be modified;

4, Department internal information departments and manager personnel can be arbitrarily changed, the staff of the Department of information can only be viewed;

5, the staff of their own folders can be arbitrarily changed, department heads and managers can only view;

6, the requirement can limit the staff to the server storage space size is 2m

7. The Technical Department folder can only upload technical documents for office classes.

8. Manager folder requires hidden access

Experimental steps:

1: Prepare a Windows Server with DC (domain controller) R2

650) this.width=650; "src=" http://s4.sinaimg.cn/mw690/004gi7CRzy6TP8HkF2373 "title=" "style=" border:0px; Vertical-align:middle; "/>

2: A Windows 7 add Win7 to the 2008 server domain on Win7 Locate the computer right-click Properties to find the change settings

650) this.width=650; "src=" http://s16.sinaimg.cn/mw690/004gi7CRzy6TP8YWN0X2f "title=" "style=" border:0px; Vertical-align:middle; "/>

Open the Select Computer name--change--in the membership of the Select domain--Enter the domain name--OK--Enter the administrator name and password for the domain controller (Windows server2008 R2 with AD)--Confirm prompt restart

650) this.width=650; "src=" HTTP://S12.SINAIMG.CN/MW690/004GI7CRZY6TP9PYAYJCB "title=" "style=" border:0px; Vertical-align:middle; "/>

Create folders for departmental employees on the server set up user and organizational units for each department

650) this.width=650; "src=" HTTP://S13.SINAIMG.CN/MW690/004GI7CRZY6TPAH8UO4BC "title=" "style=" border:0px; Vertical-align:middle; "/>

650) this.width=650; "src=" http://s10.sinaimg.cn/mw690/004gi7CRzy6TPaHQdIt09 "title=" "style=" border:0px; Vertical-align:middle; "/>

Add the role of the file service on the server: Locate the computer right-click Manage Open Server Manager--Find role--add role

650) this.width=650; "src=" http://s1.sinaimg.cn/mw690/004gi7CRzy6TPb946hGb0 "title=" "style=" border:0px; Vertical-align:middle; "/>

650) this.width=650; "src=" Http://s12.sinaimg.cn/mw690/004gi7CRzy6TPba17thab "title=" "style=" border:0px; Vertical-align:middle; "/>

650) this.width=650; "src=" http://s9.sinaimg.cn/mw690/004gi7CRzy6TPbb5muA28 "title=" "style=" border:0px; Vertical-align:middle; "/>

650) this.width=650; "src=" http://s10.sinaimg.cn/mw690/004gi7CRzy6TPbbX1zP69 "title=" "style=" border:0px; Vertical-align:middle; "/>

Next--Next--Install

2: Share folder, set permissions

650) this.width=650; "src=" Http://s3.sinaimg.cn/mw690/004gi7CRzy6TPc6Jr4m32 "title=" "style=" border:0px; Vertical-align:middle; "/>

Computer Right-click-Manage Open Server Manager--Role--File services--sharing and storage management

650) this.width=650; "src=" http://s4.sinaimg.cn/mw690/004gi7CRzy6TPciCHUD13 "title=" "style=" border:0px; Vertical-align:middle; "/>

To set the required permissions for a shared folder

650) this.width=650; "src=" http://s9.sinaimg.cn/mw690/004gi7CRzy6TPcDd3bq98 "title=" "style=" border:0px; Vertical-align:middle; "/>

Set quotas on a disk, computer right-click Manage Open Server Manager--roles--File services--sharing and storage Management--File Server Resource Manager--Quota management--Create a new quota template and apply it to all the required folders

650) this.width=650; "src=" Http://s8.sinaimg.cn/mw690/004gi7CRzy6TPgUnRBle7 "title=" "style=" border:0px; Vertical-align:middle; "/>

Set the file screen (limit the file type for uploading things)

Computer Right-click Management Open Server Manager--Role--File services--sharing and storage Management--File Server Resource Manager--File screen management

650) this.width=650; "src=" http://s6.sinaimg.cn/mw690/004gi7CRzy6TPh6dXlH45 "title=" "style=" border:0px; Vertical-align:middle; "/>

Set up shared hidden folders

650) this.width=650; "src=" http://s1.sinaimg.cn/mw690/004gi7CRzy6TPhiA9gY60 "title=" "style=" border:0px; Vertical-align:middle; "/>

How to access a shared folder on a client computer

650) this.width=650; "src=" http://s1.sinaimg.cn/mw690/004gi7CRzy6TPhrLTkQ40 "title=" "style=" border:0px; Vertical-align:middle; "/>

Experimental goals to better manage employee access in the company

Windows server r2 setting permissions in DC