Setting Folder Permissions, Windows 2000

2. Click on Properties (last menu item)

It is a good idea to create separate folders for each person or group of people that you wish to share files with.

Note: don't remove permissions for Administrators or Domain Admins; if you do your files may not be backed up. With thousands of users and millions of files, please do not be concerned that server administrators are going to snoop in your folders.

Also, don't mess with the "Allow inheritable permissions from parent to propagate to this object setting" and stay out of the Advanced properties unless you know what you are doing.  It is easy to set things so you can't do anything with that folder again.

Just type the userid(s) of the person(s) you want to give access to. Separate userids with semi-colons.

We can't choose from a list of userids anymore because there are too many (~120,000).

You may enter Domain Users to allow everyone at PSU access.  That's everyone.

This window may pop up.  Windows has tried to retrieve all userids and names.  Just click on Close.

Be sure you have entered the userids of the people you wish to grant access carefully.  The Check Names button is not useful to us (at least with Windows 2000).

Click ok, and check the permissions for the userid(s) you added.  The default will be read access (actually 3 permissions shown here). 

If you want them to be able to write to your folder, check the Modify permission.

Click OK and you are done.

The Deny permissions are not really useful here. You could grant everyone (Domain Users) access and the explicitly exclude someone with Deny permissions, but that would be unusual.