Solved

Exclusive rights to my documents on 2003 server

Posted on 2004-09-15
2
168 Views
Last Modified: 2013-12-04
Hey there, got a domain with ~25 users, folder redirection for my documents is going to a share on the root.  I have checked in the OU "grant exclusive rights to my documents".  If I am in as a user at their machinf (2000 & XP clients) I can still browse to the server and into another users folder and documents.  

I do not want other users browsing into each others my document shares.

What am I missing

each user is a domain admin and domain user

Any help is appreciated

I have tried removing the users from the domain admin, but since they need to update software and a few files on shares I had too many problems removing them from there.
0
Comment
Question by:bcameron70
2 Comments
 

Expert Comment

by:XtinaShaolin
ID: 12070115
Can't the users set permissions on their My Documents folders, so that only they and you can access it?  Instead of having the Admin group allowed access, have only their login name and your login name (presumably for access rights).
0
 
LVL 7

Accepted Solution

by:
LimeSMJ earned 125 total points
ID: 12072616
By practice, you should never give Domain Admin rights to normal users (even in a network of only 25 users).  In the end, you will be responsible if they can access the server's system directories and what-not... especially since they can roam the network and delete/change files by accident.

If they need to install programs or change stuff local to their computer just make them "local administrators" to the specific machine (Control Panel -> Users -> Just add their domain username and make them part of the Administrators group locally).

As far as the shares go, since you already implemented the OU policy, you can just remove them from the Domain Admins group to enforce the security settings you desire.

0

Featured Post

6 Surprising Benefits of Threat Intelligence

All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

Join & Write a Comment

This is a guide to the following problem (not exclusive but here) on Windows: Users need our support and we supporters often use global administrative accounts to do this. Using these accounts safely is a real challenge. Any admin who takes se…
Container Orchestration platforms empower organizations to scale their apps at an exceptional rate. This is the reason numerous innovation-driven companies are moving apps to an appropriated datacenter wide platform that empowers them to scale at a …
Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now