Posted filed under 70-410, Microsoft MCSA.

Another advantage of having a client-server model is centralizing storage.  Instead of having data dispersed among multiple hard drives on different client machines, we can store the all mission critical data on a central hard drive on the server.Using Active Directory, we can assign permission to different global groups to access files belonging to the group.  In this way, privacy of data is also preserved.

Using file manager on the Windows 2012 server, on the local disk, navigate to drive C. Create a folder name DATA.  Under the DATA folder, create three more folders named HR, Sales, and EGR.  In each folder create a blank text document with the same name as the folder, i.e. Hr.txt, Sales.txt, and Egr.txt


group rights1


For assigning permissions, the best practice is to give full control permission to the top folder (DATA folder).  Each subfolder (EGR/HR/Sales) should have NTFS full control for the corresponding global group.  All rights for other groups should be removed.



group rights 2


Right Click the EGR subfolder and select properties.


group rights 3


Select the security tab.  Click Users and select Advanced.  In the Settings, click Disable inheritance.  In the Block Inheritance Window, select Convert inherited permissions into explicit permissions on this object.


group rights 4


Remove the default built in user group Users with Read & execute access.  Select Apply and OK.


group rights 5


Now we need to add Full Control NTFS permission to global group EGR only.   Click Edit…, Select Add…, type Egr Global Group and Check Names, click OK.


group rights 6


Now, select Allow Full control check box, click Apply and OK.


group rights 7


Finally, from the client machine, log in as another user, i.e. Sales3.  From the Run command type \\server5\DATA.


group rights 8


The result should be that we cannot access the EGR subfolder as user Sales3.


group rights 9




To Become Microsoft Certified please Check out This Link;




Also published on Medium.

Comments are closed.