Page History

...

1. Groups should have a functional name (please) "Business office", "Instruction", etc.
2. All Phy dept sub-groups will be put in a primary Physics Admin / dept group - which is used to apply policies, map drives, apply networked printer queues, allow access to the share, etc.
   1. A special
3. All staff must be in at least one sub-group, and preferably only one - even if the group only contains one person. (To allow access to share, policy’s, etc.)
4. Folders which everyone can access do not need finer grained permissions. (Use primary group @ root only)
5. Groups may either be nested (HR in Business Office), or multiple groups may be given permission to a folder (Safety, Facilities), as appropriate.
6. Where group nesting/ combining is not sufficient, a user may be placed in more than one group.
7. Caution is advised with any nesting or combined group access, unintended future rights may result.
8. It is desirable to use these same groups for all services, such as Group Policies, FileMaker, Printing, File Sharing, etc.
   1. Policies can only be applied to accounts which are in the AD Tree cornell.edu\CUinv\NetIDs\Staff\AS\, or are created by AS/ChemIT/Physit (Special admins, guestID's, etc.)

Folders and permissions

...