Windows Server® 2012 Unleashed

Creating and Updating a File Share to Leverage Dynamic Access Control

Now the only remaining configuration steps include configuring the data on the file servers themselves. To configure a shared folder on a file server to leverage DAC, follow these steps:

1. Log on to a Windows Server 2012 file server that has the FSRM file role service installed and the previously created Central Access Policy GPO applied to it. Make sure the logon account is a domain user and is a member of the local administrators group on the file server.

2. Open the desired NTFS volume, and as an example, on the F drive create a root folder named DeptShare and share it with default share and NTFS permission to give administrators Full Control and Users Read/Write Access. ...