How to implement permissions to folders and files in windows?

Question

Access rights

Hello! There is a computer class on machines running Windows 8.1, computers are connected to a local network, various tests are being taken on computers, and it is necessary that the results of tests and practical work be uploaded to a shared folder on the teacher's computer, but so that one user cannot "hang" the work of another user. Ideally, the user should not see the contents of the public folder at all, but only see the files and folders that he creates, say, in the root folder he creates a folder with his last name, and loads his work into it ... Is it possible to implement this?

Answer 1

This is an absolutely standard way of working in a corporate network.
Raise blood pressure wisely and so that users work on each computer with their own (unique) name. It is possible without AD, but you still need to create unique users on each computer. In addition, in this case, it will be necessary to duplicate all users from the students' computers on the teacher's computer with the same password.
Further:
1. In the shared directory, create separate folders for each user.
2. For each user folder:
2.1. Cancel the inheritance of rights.
2.2. Give full rights to the teacher, administrator and user of this folder.
2.3. Delete the rest of the users and groups (you can leave the System).
3.All
As a result, each student will be able to work only with his own folder, the teacher will see all the folders.
PS: for teachers, if there are several of them and they will work under their own account, it is better to create a group and assign rights to the group. A group for students will also be useful, for example, to give it read rights to a shared directory (which contains user subdirectories), but not necessarily.

Answer 2

Perhaps it is possible - under Linux on Samba 3.0 did this. Under Windows, this is difficult to implement due to the limited settings for shared folders. But you can play around with access rights - at least each computer must have its own user (plus all users are on the server and each has a unique password - or set up a domain). Each user has his own folder to which he has write access, and the rest has no access. To hide passwords from the user, you can set up autologin and turn off screen savers and sleep mode (where it may ask for the password again).
PS Ideally, put a testing system - so as not to reinvent the wheel.

Answer 3

In NTFS, you can specify "write" access to a directory, but not read access to the directory.
Students will be able to write down their result, but not to consider someone else's. Yes, and they will not be able to count their own after the file has been closed.
Or create individual folders for each student, with access rights only for the teacher and this student - this will generally be according to the standard.