Desiging and Implementing a Folder Structure

When planning for your Server enabled environment, it is important to think about how the server resources will be managed.  Where are the user home folders going to live, how will these be accessed and will you require any type of public or resource folders. It is impossible for me to dictate the structure that…

When planning for your Server enabled environment, it is important to think about how the server resources will be managed.  Where are the user home folders going to live, how will these be accessed and will you require any type of public or resource folders.



It is impossible for me to dictate the structure that you will use for your networked resources, as it depends upon the number of servers, partitions and the allocation of space.  Disk quota management also needs to be considered, as Disk Quota needs to be enabled on a volume, which could mean that when a user saves to a handing in point, the user will effectively be charged twice for saving the work – particularly if you the folder permissions are wrong.

There are no hard and fast rules for defining your folder structure, but you might find my example useful in your design.

For my server system I have already created 2 partitions, E: for my User Home directories and G: for my shared applications space, remote installation space and Software deployment.  Using this arrangement would allow me to use Disk Quotas at any time during the server life time.  It should also make setting up duplicate/additional servers slightly easier, as the disk space allocation would be similar.

This configuration will also slot neatly with my Group Policy for redirecting user desktops and profile spaces – covered in another article.

If you have been following my Series for building a School Network Server, create new folders on your partitions, as follows;

C: Partition

No network based files are stored or shared from this drive.

E: Partition

This partition is used to store the user's home folders. 

  • E:Users
  • E:UsersStaff
  • E:UsersStudents
  • E:UsersTechnicians

G: Partition

This partition is used for storing the Public and Managed areas as well as Remote Installation deployment files, Single Instance Storage and software packages that can be deployed using MSI technology.  The Remote Installation and Single Instance storage folders are created and shared automatically when RIS is installed.

  • G:Applications
  • G:i386
  • G:Resources
  • G:ResourcesPublic
  • G:ResourcesStaff
  • G:ResourcesShortcut Bank
  • G:ResourcesStart MenusStaffDesktop
  • G:ResourcesStart MenusStaffStart Menu
  • G:ResourcesStart MenusStudentsDesktop
  • G:ResourcesStart MenusStudentsStart Menu
  • G:ResourcesStart MenusTechniciansDesktop
  • G:ResourcesStart MenusTechniciansStart Menu

Sharing and Folder Security

It is essential that the following folder security is placed on the newly created folders.  This will prevent students from accidentally accessing other students' areas or staff areas.

In order for the network to function correctly, the folders that where created in the previous section must now also be shared.

  1. Open My Computer.
  2. Browse to the drive that contains the folders to share.
  3. Right Click on the folder and choose Sharing and Security.
  4. Choose the Share this folder radio button.
  5. Enter the name to share the folder as.
  6. Click the Permissions button.
  7. Add/Adjust the permissions of the share according to the table below.
  8. Click the Caching button. (Not for any of the User folders)
      • Change the caching options to "Files and programs from this share will not be available offline"
  9. Click Apply.
  10. Click Close.

Folder

Share Name

User Group

Permission

G:Resources 

resources$

Domain Admins
System
Everyone

Full Control
Full Control
Read Only

G:ResourcesPublic

public

Everyone

Full Control

G:ResourcesStaffRoom

staffroom

Domain Admins
Staff

Full Control
Full Control

G:Applications

apps$

Domain Admins
Everyone

Full Control
Read Only

E:Users

users$

Domain Admins
Staff

Full Control
Full Control

E:UsersStaff

staff$

Domain Admins
Staff

Full Control
Full Control

E:UsersStudents

students$

Domain Admins
Students

Full Control
Full Control

E:UsersTechnicians

technicians$

Domain Admins
Technicians

Full Control

When sharing a folder, you may be wondering the significance of the $ behind the names of the shares.  Using the $ symbol will tell the networking side of Windows to hide these shared folders from view.  This means that you will need to specifically access those folders by name, it is not possible to browse for hidden folders.

Accessing and testing the shared folders

All shared folders can be accessed by using its UNC reference path.  This is a bit like a URL path that is used for internet addresses.  UNC paths start with 2 backslash characters; a single backslash is used as a separator to separate folder names.

To access the Public folder type, server01public into the address bar of Windows Explorer.  When you press the Enter/Return key, Windows Explorer should then display the contents of the public folder.  To access one of the hidden shared folders. Use exactly the same syntax, ensuring that you enter the $ symbol at the end of the line before pressing the Enter/Return key.

NOTE: we have not changed the default NTFS file based permissions of our newly created folders.  Changing NTFS permissions will be covered in another article.

Similar Posts

  • Adding Roles to Server 2012

    Since Windows 2008, Microsoft introduced the concepts of adding roles and features into the Server Operating System.  Roles and Features were added to Windows by using the links within System Manager.  The same is true of Server 2012, although they are no longer separate tasks.  A role can be defined as a Service or Program…

  • Configure Server 2012 R2 Server

    Once you have installed Windows Server, it is time to configure Server 2012.  You will need to perform some common house keeping to make it usable within your network.  In this tutorial you will learn how to set the computer name and IP Address. There are a number of methods that can be used to…

  • GPOGUY.com – Group Policy Stuff

    Whilst surfing the net looking for information on using Group Policy to set workstations power options so that they would not go into standby. I came across a website that had programs, links and valuable resources for Group Policy.

  • Active Directory Bulk Editor

    Ever need to change a single property of a whole set of user accounts.  I had to change the Home Drive letter assigned to over a 2000 accounts on a Windows 2003 Active Directory Domain recently.

  • Organising Active Directory for Users and Computers

    Organising Active Directory is a very powerful and flexible way to manage your school network. In this tutorial, we are going to create a basic structure that will allow us to manage both users and computers in a single branch.