User:DukeEgr93/WindowsPermission

This page contains instructions for setting permissions for a single CIFS folder. The TAs and instructors for a class will have access to the contents of this folder, and this folder only, if these instructions are carried out correctly. The object name will vary based upon the semester and course. For Spring 2019, the groups are:

• EGR 103 Spring 2019

grouper-duke-oit-applications-toolkits-EGR-103L9-01L-9353-1670-admin

• EGR 224 Spring 2019

grouper-duke-oit-applications-toolkits-EGR-224L-001-9373-1670-admin

Setting Permissions

Mount your drive via windows

• Open File Explorer and click on This PC
• At the top of the window, left-click Computer and then Map Network Drive
  • Drive: Pick an unused letter (this example will use Z:)
  • Folder: \\homedir.oit.duke.edu\users\N\NetID
    • N is the first letter of your NetID; NetID is your NetID
    • If you logged in to the computer using your NetID, you can just Finish; if not (for instance, if you logged in from your own computer), select Connect Using Different Credentials. For Different Credentials, use WIN\NetID for the user name and your OIT password

Set permissions for the main drive

• Copy the appropriate group from above to your clipboard - this will make things much easier later!
• Use file explorer to get to the "This PC" window where you see your mounted NetID folder
• Right-click the NetID folder and choose Properties
  • Click Security tab
  • Click Advanced near the bottom
    • Click Add
      • Click Select a Principal
        • If you copied the group you need, paste it in this box and then click Check Names; the name should change to admin and you can skip the next step; otherwise
          • Click Advanced...
            • In the Common Queries tab, find the Name box. Make sure the "Starts with" option is selected. Unfortunately, there is no great way to find the group you need other than to type out just about the entire group name given above - fortunately, you can copy and paste it. Once you have entered it, click the Find Now button and you should see a search result with a Name of admin and an In Folder that has entries matching those in the name of the group. Select that group, then click OK.
        • In the Select User, Computer, Service Account, or Group window, admin should now be showing up in the Enter the object name field. Click OK
      • Set Type: to Allow
      • Set Applies to: to This Folder Only
      • Click the List folder contents - note that Read & execute and Read will also be checked. Since you are setting permissions only for the folder and not the folders or files within, that is fine
      • Click OK
    • Click Apply
    • If the "Setting security information" window comes up, wait for about 30 seconds. If the process finished - great! If not, go ahead and cancel. If you cancel, a Windows Security warning will come up; click OK for that, then click Cancel in the Advanced Security Settings.
  • Click OK in the Properties window

Set permissions for CLASS (EGR103, ECE110, EGR224, or CONTROLS) folder

• Double-click in your NetID folder
• If the CLASS folder exists; great. If not,
  • Right-click
  • New->folder
  • Give the folder the appropriate name (i.e. EGR103, ECE110, EGR224, or CONTROLS)
• Right-click the CLASS folder and choose Properties
  • Click Security tab
  • Click Advanced near the bottom
    • Click Add
      • Click Select a Principal
        • If you copied the group you need, paste it in this box and then click Check Names; the name should change to admin and you can skip the next step; otherwise
          • Click Advanced...
            • In the Common Queries tab, find the Name box. Make sure the "Starts with" option is selected. Unfortunately, there is no great way to find the group you need other than to type out just about the entire group name given above - fortunately, you can copy and paste it. Once you have entered it, click the Find Now button and you should see a search result with a Name of admin and an In Folder that has entries matching those in the name of the group. Select that group, then click OK.
        • In the Select User, Computer, Service Account, or Group window, admin should now be showing up in the Enter the object name field. Click OK
      • Type: Allow
      • Applies to: This folder, subfolders, and files
      • Click Full Control
      • Click OK
    • On the bottom left of the Advanced window, click the "Replace all child object..." box
    • Click OK
    • For the Windows Security block, click "Yes" for wishing to continue
  • In the Properties window, click OK