NOTE: I have never been able to figure out how to do drop folders that work correctly from Macs. Apparently Samba (the file access protocol Macs and Unix systems use doesn't work exactly the same way, with the result that you don't get properly working drop folders for Macs. The workaround is that in labs that use Macs, the teacher has to grab the turned-in work from the students' personal folders for the class. Such is life.

Teachers generally have a teacher folder somewhere on a server that both students and teachers can access. Inside of this teacher folder are a number of nested folders, the exact nature of which depends on the teacher's class lineup. The one we use mostly is where each Period that the teacher has a class that uses computers has a folder. Inside that folder, each class has up to 3 folders:

• READ folder.
  Used for distributing assignments and other information.
  • Students can read and list the contents of this folder and all sub-folders.
  • Students cannot write or modify
  • The teacher has full control of this and all sub folders.
  • Other staff members and administrators can view the folders.
  • The tech people have full control.
  
  
• WRITE folder
  Used for turning in completed assignments.
  • Students can drop files into the folder but cannot list or read the contents.
  • The teacher has full control of this and all sub folders.
    (The teacher may use sub folders to move homework into a "Graded" sub-folder when grading is completed.)
  • Other staff members and administrators can read and list the folders and sub-folders.
  • The tech people have full control.
  
  
• STUDENT folder
  This is a container for the individual student folders.
  • Students have full control over their own individual folder and can create sub-folders.
  • Other students have no access.
  • The teacher has full control over of this and all sub folders.
  • Other staff members and administrators can read and list the folders and sub-folders.
  • The tech people have full control.

An example is shown below. Mr. Chipping is the teacher. He has classes that require the use of computers periods 1, 3, and 7. Each class has a structure similar to Period 1, but, of course, different students.

• chipping
  • p1
    • read
    • students
      • Buck, Pearl
      • Lee, Harper
      • Welty, Eudora
    • write
      • graded_work
  • p3
  • p7

To set up folders as described, do the following after logging on to the server:

1. Create a folder for the teacher (Mr. Chipping above) on the server.
   1. Right Click the new folder and choose Sharing.
   2. Click the "Share this Folder" button.
   3. Click the "Permissions" button.
   4. Under "Group or User Names" you will see "Everyone".
   5. Under "Permissions for Everyone" click "Full Control".
      Yes, I know this seems wrong. But if you don't do this NOBODY will be able to get write or modify permission, even if it is set so in the "Security" tab. This will set the Share Permissions for Everyone to "Full Control", "Change", "Read".
      Trust me on this one!
   6. Click "Apply".
   7. Click "OK".
   8. Right-click the folder and choose "Security".
   9. Permissions for this folder should be set as follows:
      

      Group or User	Scope	Allowed Permissions
      Domain Admins	This + sub	Full Control
      CGL_ADMIN_GG	This + sub	Read & Execute, List Folder, read
      CGL_STUDENT_GG	This only	(Adv)Traverse/Exe, List/Read, Read Attr. Read Ext Attr, Read Perm
      CGL_TEACHER_GG	This + sub	(Adv)Traverse/Exe, List/Read, Read Attr, Read Ext Attr, Read Perm
      ID# (Teacher)	This + sub	Full Control
      ID# (Local Tech)	This + sub	Full Control

   
   
   
2. Create a folder for each of the class periods (eg. "p1") inside Mr. Chipping's folder.
   1. Right-Click the new folder and choose "Security".
      This folder and all others are NOT marked as shared, so don't go there!!
   2. Click the "Security" tab.
   3. You don't have to change the permissions that "fall from above", so you only need to set the following:

      Group or User	Scope	Allowed Permissions
      CGL_STUDENT_GG	This only	(Adv)Traverse/Exe, List/Read, Read Attr. Read Ext Attr, Read Perm

   
   
   
3. Create the "read" folder inside each period folder.
   1. Right-Click the new folder and choose "Properties".
   2. Click the "Security" tab.
   3. You don't have to change the permissions that "fall from above", so you only need to set the following:

      Group or User	Scope	Allowed Permissions
      CGL_STUDENT_GG	This + sub	(Adv)Traverse/Exe, List/Read, Read Attr. Read Ext Attr, Read Perm

   
   
   
4. Create the "students" folder inside each period folder.
   1. Right-Click the new folder and choose "Properties".
   2. Click the "Security" tab.
   3. You don't have to change the permissions that "fall from above", so you only need to set the following:

      Group or User	Scope	Allowed Permissions
      CGL_STUDENT_GG	This only	(Adv)Traverse/Exe, List/Read, Read Attr. Read Ext Attr, Read Perm

   
   
   
5. Create the individual student folders inside the "students" folder inside each period.
   One per student. I usually do it [(Last name), comma, space, (First Name)] but its up to you.
   1. Right-Click each new folder (yes, you need to do this individually for each of them) and choose "Properties".
   2. Click the "Security" tab.
   3. You don't have to change the permissions that "fall from above", so you only need to set the following:

      Group or User	Scope	Allowed Permissions
      ID# for this student	This + sub	Full Control

      Note: Its a good idea to "Check Names" before adding a number. We all make typing errors.
   4. This lets each student create sub folders, etc. and generally organize things as they like.
   
   
   
6. Create the "write" folder inside each period folder, or see a better option below.
   1. Right-Click the new folder and choose "Properties".
   2. Click the "Security" tab.
   3. You don't have to change the permissions that "fall from above", so you only need to set the following:

      Group or User	Scope	Allowed Permissions
      CGL_STUDENT_GG	This only	(Adv)Read Attr, Create Files/Write Data, Create Folders/Append Data, Write attr, Write Ext Attr, Read Perm.

   
   
   
7. Create the "write" folder inside each period folder... A better option.
   This will allow students using either Macs or PCs to drop items into the folder. They will be able to see what is in the folder, but cannot copy, change, overwrite, delete, or read anything already in there. The system may look like it will allow these actions, but it won't. Also, it may say it won't allow writing of a file, but when you check it will be in there.
   1. Right-Click the new folder and choose "Properties".
   2. Click the "Security" tab.
   3. Click the "Advanced" button near the bottom of the panel.
   4. De-select "Allow inheritable permissions from the parent...".
   5. Click the "Copy" button to copy the previously inherited permissions.
   6. Double-Click the line for "CGL_STUDENT_GG".
   7. For "Apply onto:" select "This folder only".
   8. Select "Allow" for ONLY the following:
      • List Folder / Read Data
      • Read Attributes
      • Create Files / Write Data
      • Write Attributes
      • Write Extended Attributes
      • Read Permissions
   9. Click out of "Properties" by clicking "Apply" (otherwise "OK") all the way out.
   
   
   
8. Create the "graded_work" folder under inside the "write" folder each period.
   1. Right-Click the new folder and choose "Properties".
   2. Click the "Security" tab.
   3. You don't have to change any permissions. They all "fall from above".