XP and protecting folders

[-HaVoC- Profile]

What I would prefer to do is give the rights to the admins and only the admins. What I just did was to deny everything for the guest group under permissions and add the admins with full permissions. It worked so far as removing the rights to even view the contents for the guest group. But am I doing this the best way? I do remember there being a difference between permissions and security I believe...

[Camel toe joe Profile WebsiteYIM]

Originally posted by -HaVoC-
What I would prefer to do is give the rights to the admins and only the admins. What I just did was to deny everything for the guest group under permissions and add the admins with full permissions. It worked so far as removing the rights to even view the contents for the guest group. But am I doing this the best way? I do remember there being a difference between permissions and security I believe...

From what I understand you are doing it right, in fact as I think was already mentioned you can add all admins to an admin group, and just give permisions to that group rather then each admin.

[Fat Bastard]

If you did what Wairudo said, along with moving what you wanted to have admin access to in a seperate folder. Then you should be good. While denying all access to other folders and such including access to read them. As far as hiding them could just put all the things you wanted the admins only to see into another folder. Where noone but admins could access and all others would just see a folder named XXXX.

Acouple different ways you can set it all up but from what it sounds like your wanting to do and what everyone said is about the easiest and best way to do it using group profiles.

[Sidekick Floppy Profile Website]

I don't know if someone told this yet, but there is a difference in share permission and security permissions. Share permissions can restrict certain users on other clients access to the file over the network. However, they can still access the file if they login locally on the PC who shared the map. This is where the security tab comes in. Here you can restrict people acces to a file/folders on the network AND locally at the same time.

Best solution is the one Wairudo mentioned: Make a Domain local group (unless you work with multiple domains in Active Directory) and only give this group full access to the map. Remove all other groups/users. This should be sufficient if you're only dealing with data.

[Face Profile]

When you name the share, make it an admin share by adding a dollar sign at the end of the name (ex. Share name = Hidden$). This way, the share won't even show up in XP when they view shares. Only you have to actually TELL the admins that the share exists when you map the drive. And don't forget the $ again when you map the drive (ex. \\MyServer\Data\Hidden$" )

[-HaVoC- Profile]

Thanks guys for the excellent information