Active Directory File Permissions Management

When it comes to sharing resources on a network the first and foremost  concern is who will have access to those resources and at what levels. Managing file servers in an active directory environment can be very tedious, and the fact that it has to be done one user  at a time makes it one of the most time consuming activities for a system administrator.

For example,  Say a new employee has joined the HR team in your organization. You will want to give him access to shared resources such as staff details, HR policies, company policies etc but at the same time giving him access to financial data is unnecessary and could lead to mislocation, tampering or misuse of data, as another instance you may never want to give a new employee a delete permission on any resource. Hence you need to put in place a few confinements in the level of access. You can do this by carefully defining the user’s access control entries.

The file server management feature in ADManager Plus empowers administrators to manage(i.e assign, modify, revoke) user’s NTFS and share permissions in bulk. All you have to do is choose the shared resource, and then scrutinize and define the access controls of users  based on their necessity. By using ADManager Plus File server management the Admin can :

• Give users/groups access to required resources without security risk
• Perform “Bulk modification” of permissions  
• Efficiently discipline permissions on resources, thereby organizing the environment
• And all this from a simple, single and centralized window

ADManager Plus  offers four sections of operations in the file server management section, They are :

• Modify NTFS permissions – to define action users can take on folders and files on the network and locally
• Revoke NTFS permissions – to revoke NTFS permissions
• Modify share permissions- to determine what type of access others will have on the shared folder
• Revoke Share permissions- to revoke share permissions

The revoking section of operations come very handy in scenarios where an employee leaves the organization. The admin does not have to sit and break his head as to what permissions to revoke or on what shares the permissions have to be revoked and so on. All he has to do is choose the user account(say Bob) and under permissions choose any permission(in this case all permissions as the employee is leaving) and the type(deny). His job is done in no time with no mess.

In addition to this ADManager Plus also has reports on NTFS permissions. Reports such as Shares in the servers, permissions for folders, folders accessible by accounts and non-inheritable folders. These reports give immediate visibility into access controls in a comprehensive way and hence come handy to the admins. This immediate visibility into permissions can help them effectively enhance security.

Featured links

Need Features? Tell Us
If you want to see additional features implemented in ADManager Plus, we would love to hear. Click here to continue