Restricted Folder Access

On Windows SBS 2003 I am having problems with restricted access on folders. My clients are NOT on the domain. So, I can remove everyone and add only the user I want but I keep running into the only allowed user not being able to change files? Is this task not possible unless they are part of the domain?
If so what is the proper way to restrict a folder to only one user with full access to their folder without being on the domain?
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
Can you clarify what you mean by "clients"? Are you referring to the workstations?  If so, why aren't they on the domain?  

But it's not the workstations that control permissions, it's the user accounts... you WOULD have to have your users be "part of the domain" meaning they must have Active Directory User Accounts.

When you use the add-user wizard, SBS automatically creates a user folder with these permissions automatically configured for you.  

rickparyAuthor Commented:
Yes, I am referring to workstations.
All the users have active directory accounts but they are not part of the domain.
I havent made them part of the domain yet because I guess I am fearful of the process.
They all have desktops with much originality. I am not familiar with the migration process and what they will loose when the workstation logon joins the domain? Is there a simple way to do this?
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
First, if a user has an active directory account the USER is part of the domain... ACTIVE DIRECTORY = DOMAIN essentially.

Second, the simple way to migrate the user profiles and settings is by reading the SBS manual and following the directions.  An overview of the process is here:  If you follow the prescribed methods, all user settings will be migrated.

Just to be safe though, you can always use the Files and Settings Transfer Wizard which is part of XP, to back up the customizations on each workstaiton.  Run the wizard (START > All Programs > Accessories > System Tools > Files and Settings Transfer Wizard) and save the file to the C: drive of each workstation.  This will preserve all settings should something go wrong you can just run the wizard again to restore them to the new account.

I will tell you though, that the "magic" of SBS lies in it's centralized management and collaboration features.  Not adding everything to the domain is costing you tremendously by not taking advantage of those things.

If you want a good written companion to walk you through all of this, check out


Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
FYI, this is an answer I recently posted regarding what gets configured when you use the connectcomputer wizard.


It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.