Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

User folder permissions

Posted on 2004-08-05
9
178 Views
Last Modified: 2012-05-05
Hopefully there is something I can do here to fix this. Currently I have about 500 students - users - in Active Directory, and each one of them has their own network directoryon the Windows 2000 server. The directory is mapped through their profile to the F: drive. Well, when the accounts were created, it also created their home directory, but the security settings were set to give access to "everyone" and not to just the student "user" who the directory belongs to. I need to find out if there is a way I can globally set the permissions on these student's folders so that only the student the folder is assigned to will have access to it. Along with the system administrator, of course. We have a problem during the school year of students going into other student's folders and deleting papers, coping papers, etc. when the permissions aren't set, and I need to get this fixed.
Thanks in advance for the help!
Eric Portenier
0
Comment
Question by:eporteni
9 Comments
 
LVL 9

Accepted Solution

by:
jdeclue earned 63 total points
ID: 11730518
When you look at the permissions, is the users account there as well? if it is then try removing Everyone, add Domain Admins at the root and propogate the changes, if the user is not there... then you can either manually change the rights to each folder, or use a scipt... ther are other alternatives... including some that would be quicker but it would take too much too explain...

Maybe some one else has a quicker solution.

J
0
 
LVL 9

Expert Comment

by:BigC666
ID: 11730545
howdy,
sorry, don't think that's there any to push what you want to do, just have to right click the individual folders, select properties, security add the user to the list and then deny the everybody account.

hope that this helps
0
 
LVL 7

Expert Comment

by:magus123
ID: 11730901
jdeclue has the right idea , remove the everyone group from the top folder or
where the  home directory starts from and remove the everyone group
from thier , then enable the inherit tab to propogate the changes.
make sure the administrator or etc is in the folder permissions before
removing everyone group. also if a authenticated group exist too
you have to remove that one too.

after that test it and see if it works by loggin on to a temp account
create for the purpose if you can roam around into other peoples
home directory. i would also while i am their consider checking
other valnurbilities. and if  those computers have internet.
check for adware/malware  \too.
0
Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

 
LVL 15

Expert Comment

by:Rob Stone
ID: 11733766
Don't deny access to the everyone group!! That will block off everyones access. Just remove the everyone group.
0
 
LVL 2

Assisted Solution

by:Ranidae
Ranidae earned 62 total points
ID: 11766281
I've used xcacls and a VBScript or Batch File to modify the permissions on all my student home directories.  
as part of a vbscript,  the following sets permissions on userdirectories to:

Administrators - Full Control
student - modify
teachers - modify

Use this inside an array that calls up every users home directory and presto!

Set WshShell = WScript.CreateObject("WScript.Shell")
WshShell.Run "xcacls.exe " & homedirpath & UserName & " " & "/G" & " " & UserName & ":C" & " " & "Administrators:F" & " " & "Teachers:C" & " " & "/Y"

xcacls is included in the windows 2000 resource kit.  You may find it easier to do via a batch file.
0
 
LVL 9

Expert Comment

by:jdeclue
ID: 12362821
I gave the answer and Ranidae offered a better way of doing it.... split

J
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Locking down a taskpad 1 169
Problems executing VBS script in Windows 2000 16 181
Corrupted W2K  serverregistry 2 157
Server 2012 R2 added to a Windows 2000 domain 3 52
NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
The business world is becoming increasingly integrated with tech. It’s not just for a select few anymore — but what about if you have a small business? It may be easier than you think to integrate technology into your small business, and it’s likely…
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question