Mapped Drives Vs Folder on Server

SquareRuut · 01-06-2016 12:28PM #1

I am looking for feedback on whether it would be better to use a single mapped drive and create a folder for each department or to create a mapped drive per department.

Security wise I cannot see a problem with either config but the mapped drives are a limited resource and can cause problems when there are card readers in computers as you start to run out of letters.

Mr. Fancypants · 01-06-2016 10:52PM

If you are using Windows 2008 or greater you could look into Access Based Enumeration. I have had a few clients set up this way with a single drive map and they can only see the folders they have access to within.

https://technet.microsoft.com/en-us/library/dd772681(v=ws.10).aspx

Fysh · 02-06-2016 09:32AM

A single mapped drive for all should be fine as long as you have access based enumeration enabled and NTFS permissions on the folders within the drive correctly configured. The main thing I'd suggest while you're doing this is to set up non-department groups in your top-level permissions, so that when the inevitable case of "someone from Dept A needs access to a folder for Dept B in a hurry" comes up, you're not running around trying to make changes to your security permissions on the fly. (Or, worse, this happens while you're on holiday and someone who doesn't know what they're doing starts making changes...)

SquareRuut · 07-06-2016 09:17AM

Thanks Guys, both good suggestions. I will be putting these in place.

Mapped Drives Vs Folder on Server

Comments