Hello, So I have a client that has a Windows 2008 Server. They have several shares that are open to all admins (Basically all users). They want to allow 4 of 10 users to be Admins and the rest to have restrictions to certain shares. My thought is go into to Active directory and change user/group permissions then make the changes to provided shares. However I was told there is an easier way by deploying a group policy. Can anyone help me find the BEST way to make such changes?
Create a group for the users/ shares depending how you want to set it up. On the share permissions give everybody full access On the NTFS permissions disable inheritance and add in domain admins full control, and your group you created previously with either read, or modify (I wouldn't give them full permissions) I will expand this later today if you want?
