Pondering how to manage some Domain Shares

I'm a little rusty on NTFS and Share Permissions without digging out the books and trying to rehash stuff I wanted to avoid anyway.

Here's the scenerio:

Lets call this company manufacturing.com and lets say their domain name is the same.
Manufacturing.com has about 50 domain users.

There is a public folder on the server called C:\organization
It is shared out to all domain users and mapped as an "O" drive in the logon script.

There are subfolders of Production, HR, Accounting, and Seinor Staff.

Production wants their data to be viewed by everyone in the organization. Problem is someone is deleting documents.
So somehow I need to set permissions so only select staff can change documents but everyone can view.

Accounting wants their folder protected where only the accounting staff can see it.

Seinor staff and HR wants there stuff hidden but Seinor staff needs to see HR's stuff.

I tried to simplify it as much as possible but you get the idea.

Any suggestions?

 

You need more shares.
You need to see if all these requirements could be done with only one share.
Then you need to create security groups to meet your requirenments.

Ex:
group1 read
group2 change
group3 read hr
group4 change hr

 

Set up your groups. Accounting, HR etc...

To the Production Folder assign the Everyone Group "Read" priviliges only and assign Modify permissions at the NTFS level or Full Control Privlieges at the Share level to whomever whithin the Accounting group who needs it, managers or whomever.

To the Accounting Folder assign Read only privileges to the accounting group and Full control to it's managers or whomever.

Senior staff, same as Accounting, just add H.R. to the access list. Just set up the groups and then go to your shares and add the appropriate Share level permissions

the Share level permissions are as follows: "Full Control" "Change" and "Readl "

NTFS permissions are much more flexible and varied and are set up locally on a machine by machine basis.

I hope this helps.