Desiging and Implementing a Folder Structure

When planning for your Server enabled environment, it is important to think about how the server resources will be managed.  Where are the user home folders going to live, how will these be accessed and will you require any type of public or resource folders. It is impossible for me to dictate the structure that…

When planning for your Server enabled environment, it is important to think about how the server resources will be managed.  Where are the user home folders going to live, how will these be accessed and will you require any type of public or resource folders.



It is impossible for me to dictate the structure that you will use for your networked resources, as it depends upon the number of servers, partitions and the allocation of space.  Disk quota management also needs to be considered, as Disk Quota needs to be enabled on a volume, which could mean that when a user saves to a handing in point, the user will effectively be charged twice for saving the work – particularly if you the folder permissions are wrong.

There are no hard and fast rules for defining your folder structure, but you might find my example useful in your design.

For my server system I have already created 2 partitions, E: for my User Home directories and G: for my shared applications space, remote installation space and Software deployment.  Using this arrangement would allow me to use Disk Quotas at any time during the server life time.  It should also make setting up duplicate/additional servers slightly easier, as the disk space allocation would be similar.

This configuration will also slot neatly with my Group Policy for redirecting user desktops and profile spaces – covered in another article.

If you have been following my Series for building a School Network Server, create new folders on your partitions, as follows;

C: Partition

No network based files are stored or shared from this drive.

E: Partition

This partition is used to store the user's home folders. 

  • E:Users
  • E:UsersStaff
  • E:UsersStudents
  • E:UsersTechnicians

G: Partition

This partition is used for storing the Public and Managed areas as well as Remote Installation deployment files, Single Instance Storage and software packages that can be deployed using MSI technology.  The Remote Installation and Single Instance storage folders are created and shared automatically when RIS is installed.

  • G:Applications
  • G:i386
  • G:Resources
  • G:ResourcesPublic
  • G:ResourcesStaff
  • G:ResourcesShortcut Bank
  • G:ResourcesStart MenusStaffDesktop
  • G:ResourcesStart MenusStaffStart Menu
  • G:ResourcesStart MenusStudentsDesktop
  • G:ResourcesStart MenusStudentsStart Menu
  • G:ResourcesStart MenusTechniciansDesktop
  • G:ResourcesStart MenusTechniciansStart Menu

Sharing and Folder Security

It is essential that the following folder security is placed on the newly created folders.  This will prevent students from accidentally accessing other students' areas or staff areas.

In order for the network to function correctly, the folders that where created in the previous section must now also be shared.

  1. Open My Computer.
  2. Browse to the drive that contains the folders to share.
  3. Right Click on the folder and choose Sharing and Security.
  4. Choose the Share this folder radio button.
  5. Enter the name to share the folder as.
  6. Click the Permissions button.
  7. Add/Adjust the permissions of the share according to the table below.
  8. Click the Caching button. (Not for any of the User folders)
      • Change the caching options to "Files and programs from this share will not be available offline"
  9. Click Apply.
  10. Click Close.

Folder

Share Name

User Group

Permission

G:Resources 

resources$

Domain Admins
System
Everyone

Full Control
Full Control
Read Only

G:ResourcesPublic

public

Everyone

Full Control

G:ResourcesStaffRoom

staffroom

Domain Admins
Staff

Full Control
Full Control

G:Applications

apps$

Domain Admins
Everyone

Full Control
Read Only

E:Users

users$

Domain Admins
Staff

Full Control
Full Control

E:UsersStaff

staff$

Domain Admins
Staff

Full Control
Full Control

E:UsersStudents

students$

Domain Admins
Students

Full Control
Full Control

E:UsersTechnicians

technicians$

Domain Admins
Technicians

Full Control

When sharing a folder, you may be wondering the significance of the $ behind the names of the shares.  Using the $ symbol will tell the networking side of Windows to hide these shared folders from view.  This means that you will need to specifically access those folders by name, it is not possible to browse for hidden folders.

Accessing and testing the shared folders

All shared folders can be accessed by using its UNC reference path.  This is a bit like a URL path that is used for internet addresses.  UNC paths start with 2 backslash characters; a single backslash is used as a separator to separate folder names.

To access the Public folder type, server01public into the address bar of Windows Explorer.  When you press the Enter/Return key, Windows Explorer should then display the contents of the public folder.  To access one of the hidden shared folders. Use exactly the same syntax, ensuring that you enter the $ symbol at the end of the line before pressing the Enter/Return key.

NOTE: we have not changed the default NTFS file based permissions of our newly created folders.  Changing NTFS permissions will be covered in another article.

Similar Posts

  • Adding DHCP to your Windows Server 2003

    DHCP is a service that is responsible for assigning IP addresses to computers on your network.  Using DHCP takes the hassle out of managing your network IP addresses.  DHCP is an essential part of using the PXE boot feature of your computers network card.

  • Planning a School Network

    ICT is major part of the school curriculum, the use of computers and IT resources has grown exponentially and continues to grow.  Almost gone are the days of running a few standalone PCs, or running a Peer to Peer Internet enabled network.  It is time to embrace the centralised server environment.  It isn’t as complex as…

  • Adding Roles to Server 2012

    Since Windows 2008, Microsoft introduced the concepts of adding roles and features into the Server Operating System.  Roles and Features were added to Windows by using the links within System Manager.  The same is true of Server 2012, although they are no longer separate tasks.  A role can be defined as a Service or Program…

  • Group Policy Management Console

    If you have been using Windows 2000 and Windows 2003 server platforms with Active Directory, you will already be aware of the power and flexibility that Group Policy can provide within the domain. Until recently Group Policy management was only available by using the Active Directory Users and Computers MMC snapin’s at the server or workstations…