I recently purchased and installed a Adaptec SnapServer 4200 NAS for Backup to Disk and for user's storage. I joined the NAS to the domain and am able to set permissions, etc. I am using this NAS for Backup to Disk functions and to store user's home directories.
I have the Backup to Disk (BUTD) working fine but now I am trying to setup the shares for users home directories. I basically want to map their P:\ drive to \\nas\Users\%username% and then redirect their My Documents to the P:\ drive.
I am running an SBS 2003 server which sets this up for you so I looked at the permissions it gives the Users Shared Folders and each user folder. Domain Admins, Folder Operators, and SYSTEM have full control of the Users Shared Folders while Domain Users only have the following permissions: Traverse Folder/Execute Folder, List Folder/Read Data, Read Attributes, Read Extended Attributes, Create Folders/Append Data, Read Permissions.
Administrators, Domain Admins, Folder Operators, and the specific user have full control of their folder under the Users Shared Folders.
When I created the share called 'Users' on the NAS I gave Domain Admins and Folder Operators Full Control. I then explored into that share and change the permissions to give Domain Users the Traverse Folder/Execute Folder, etc. permissions. I then created folders under the Users folder for each user and gave Domain Admins, Folder Operators, and the user full control of their folder.
I also disabled all inheritance on the Users folder and checked off "Apply these permissions to objects and/or containers within this container only."
My problem is that the Domain Users permissions from the Users folder is still be inheritated to each user folder below that allowing any user to read another user's files.
Does anyone have any ideas on how to solve this? I want to move their My Documents to the NAS because its a RAID-5 and has more space than our SBS server which only has one RAID-1 set that has about 109GB left on the drives.
Thanks for all your help!