Shulou(Shulou.com)06/02 Report--

Unified management of company storage files, access control, account mapping and sharing paths, etc.

The plan adopted by the company at present

Lab operating environment:

Esxi Virtualization

The operating system servers 2012 R2 has established the domain lvfengkai.com

A distributed file DFS has been created

Mount a hard disk (proposed storage cabinet)

1. Create two users users to access the soft share ceshi01 ceshi02

Create two group permissions: G_soft, R_soft

two。 Create two users users to access the public shared guest01 guest02

Create two group functions: G_public, R_public

3. Create a shared directory C:\ dfs\ under the C disk path and create two folders named: soft, Public share

one。 Mount a formatted partition disk

Note: it is recommended that there is no data in it, the formatted empty hard disk to avoid confusion of permission files.

1. Mounted on C:\ dfs\ soft and C:\ dfs\ public shares respectively

two。 Create a shared folder and set permissions

1. Create a new C:\ dfs\ soft\ soft two secondary directories with the same file name

Note: there will be user rights control problems when mounting the hard disk under the same file. So if you create a new file, there will be no two soft when you access it.

Public sharing as above

two。 Create a new soft share, check allow shared cache (it is not recommended to start access-based enumeration), delete the old permissions, create new domain administrator permissions, and add group G_soft read permissions (give G_soft the right to modify write and read permissions, and give R_soft read permissions). Cancel inheritance.

Public sharing as above

three。 User permissions and groups

Create organizational unit group users

Add ceshi01 to the G_soft group to write and edit, and ceshi02 to the R_soft read group

Add guest01 to the G_public group to write and edit, and guest02 to the R_public read group

three。 Verification

The 1.ceshi01 account successfully mapped the soft shared disk.

The 2.ceshi01 account verifies that it has write permission to soft. The ceshi02 account cannot be created but can be copied out of the soft share. And ceshi01 cannot access public shares that are not authorized to it.

3.guest01 can access write public shares, but cannot access soft.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.