User folder permissions
Hopefully there is something I can do here to fix this. Currently I have about 500 students - users - in Active Directory, and each one of them has their own network directoryon the Windows 2000 server. The directory is mapped through their profile to the F: drive. Well, when the accounts were created, it also created their home directory, but the security settings were set to give access to "everyone" and not to just the student "user" who the directory belongs to. I need to find out if there is a way I can globally set the permissions on these student's folders so that only the student the folder is assigned to will have access to it. Along with the system administrator, of course. We have a problem during the school year of students going into other student's folders and deleting papers, coping papers, etc. when the permissions aren't set, and I need to get this fixed.
Thanks in advance for the help!
Eric Portenier
Thanks in advance for the help!
Eric Portenier
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
jdeclue has the right idea , remove the everyone group from the top folder or
where the home directory starts from and remove the everyone group
from thier , then enable the inherit tab to propogate the changes.
make sure the administrator or etc is in the folder permissions before
removing everyone group. also if a authenticated group exist too
you have to remove that one too.
after that test it and see if it works by loggin on to a temp account
create for the purpose if you can roam around into other peoples
home directory. i would also while i am their consider checking
other valnurbilities. and if those computers have internet.
check for adware/malware \too.
where the home directory starts from and remove the everyone group
from thier , then enable the inherit tab to propogate the changes.
make sure the administrator or etc is in the folder permissions before
removing everyone group. also if a authenticated group exist too
you have to remove that one too.
after that test it and see if it works by loggin on to a temp account
create for the purpose if you can roam around into other peoples
home directory. i would also while i am their consider checking
other valnurbilities. and if those computers have internet.
check for adware/malware \too.
Don't deny access to the everyone group!! That will block off everyones access. Just remove the everyone group.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
I gave the answer and Ranidae offered a better way of doing it.... split
J
J
sorry, don't think that's there any to push what you want to do, just have to right click the individual folders, select properties, security add the user to the list and then deny the everybody account.
hope that this helps