I tried that and then not even the user with full rights could write to his/hers own folder. That's what's driving me nuts!
Main Topics
Browse All TopicsI have a rather simple question regarding share permissions and home folders:
I have a share on a server were users save their work. The drive is automatically mapped as their home folder under their profile, something like: \\server1\share1$\%usernam
The shared folder, share1$ has its share permissions set as follows: Administrator: Full Control BigBoss: Full Control and Authenticated Users: read and change. (BigBoss being the user that needs access to all the other users' folders.
When a new user account is created, his/hers' folder is automatically created under \\server1\share1$ and full access to that user, administrator and BigBoss is granted by inheritance. I have about 300 user folders set this way. Well, today I discovered that user1 can open and view user2' folders. User1 cannot however delete user2's files. The fact that user1 can open user2 folders is unacceptable. like I said: user1 permissions show user1, administrator and bigboss and the same goes for user2, only user2, administrator and big boss show up in the security tab and so on. What am I doing wrong?
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
malbee,
remember that NTFS permissions are a combo of Share and File permissions. It sounds like your script is addressing Share permissions, but not file/folder permissions.
Your Share permission ' Authenticated Users: read and change' will allow all users in that domain to view each others folders and file names
IF
the folder security settings (not Share settings) also have something like 'Everyone' or 'Authenticated Users' also have Read permissions.
Keeping that Share setting and *removing* AuthUsers from the file/folder permissions will block all users from being able to browse/open other users folders.
You said that then blocks out each user from their own folder.
To fix that, go to the folder security permissions (again, NOT Share permissions) and add each individual user with appropriate permissions over their own folder and propagate that down.
If that still doesn't work, post a screenshot of the Share and folder security tabs and I'm sure we can help.
Business Accounts
Answer for Membership
by: KCTSPosted on 2008-09-15 at 18:12:56ID: 22484171
Remove Authenticated users - this is anyone who is logged in - and currently you are allowing them read and change.