NTFS, SMB Shares and Folder Redirection

1. Project overview

Group-based file services and a documented server-placement correction.

2. Objective

Provide departmental access, H:/S: mappings and redirected Documents with clear authorization boundaries.

3. Environment and technologies

Windows Server; NTFS; SMB; AD groups; home folders; Group Policy folder redirection.

4. Architecture

Groups control shared folders; home directories map to H:, Staff to S:, and Documents uses designated server roots. Final UNC mappings were not recovered.

5. Technical implementation

1. February 14 logs record H: scripting, Staff subfolders and domain-local groups.
2. February 18 records completed Staff permissions and testing, plus GPO tests.
3. February 19 records that Staff/Documents were initially on the wrong server; folders were relocated and permissions recreated.
4. No final allow/deny matrix or exact final server-path topology is invented.

6. Configuration examples

Illustrative checks; contribution and correction come from dated logs.

# Illustrative verification, not recovered output:
Get-SmbShare
Get-SmbShareAccess -Name <share-name>
Get-Acl <folder-path>
gpresult /r

7. Security considerations

Combine share and NTFS permissions deliberately and protect redirected user data. Copying a folder does not establish correct ACL inheritance.

8. Troubleshooting

Actual documented issue: wrong server placement. Recorded action: move folders and recreate permissions. No final post-relocation access result is shown.

9. Verified result

The log reports permission tests before the placement correction and relocation afterward. Final post-correction acceptance and restored-data tests remain unverified.

10. Original evidence

LogBookTemplate updated.docx, February 14/18/19, 2025; Applied Studies II permission requirements. No staff identities or raw UNC records published.

Evidence register · Recovered commands are owner-supplied history. Illustrative examples are not claimed execution.