Solved

Exclusive rights to my documents on 2003 server

Posted on 2004-09-15
2
173 Views
Last Modified: 2013-12-04
Hey there, got a domain with ~25 users, folder redirection for my documents is going to a share on the root.  I have checked in the OU "grant exclusive rights to my documents".  If I am in as a user at their machinf (2000 & XP clients) I can still browse to the server and into another users folder and documents.  

I do not want other users browsing into each others my document shares.

What am I missing

each user is a domain admin and domain user

Any help is appreciated

I have tried removing the users from the domain admin, but since they need to update software and a few files on shares I had too many problems removing them from there.
0
Comment
Question by:bcameron70
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 

Expert Comment

by:XtinaShaolin
ID: 12070115
Can't the users set permissions on their My Documents folders, so that only they and you can access it?  Instead of having the Admin group allowed access, have only their login name and your login name (presumably for access rights).
0
 
LVL 7

Accepted Solution

by:
LimeSMJ earned 125 total points
ID: 12072616
By practice, you should never give Domain Admin rights to normal users (even in a network of only 25 users).  In the end, you will be responsible if they can access the server's system directories and what-not... especially since they can roam the network and delete/change files by accident.

If they need to install programs or change stuff local to their computer just make them "local administrators" to the specific machine (Control Panel -> Users -> Just add their domain username and make them part of the Administrators group locally).

As far as the shares go, since you already implemented the OU policy, you can just remove them from the Domain Admins group to enforce the security settings you desire.

0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
GPO not applying to designated group-- Server 2012R2 2 77
How do I restrict certain programs? 9 78
Mac OS upgrade: Does it expunge malware? 4 51
RRAS on Windows Servers 13 47
Recently, a new law in my state forced us to get a top-to-bottom analysis of all of our contract client's networks. While we have documentation, it was spotty at best for some - and in any event it needed to be checked against reality. That was m…
Article by: btan
The intent is not to repeat what many has know about Ransomware but more to join its dots of what is it, who are the victims, why it exists, when and how we respond on infection. Lastly, sum up in a glance to share such information with more to help…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question