How to set correct permissions on existing redirected folders

We've recently taken over the IT support for a company that has an SBS 2003 server and a dozen XP/Vista PCs and laptops.

The company that originally supplied them with the PCs and laptops gave them Home editions of both XP and Vista - so of course, no one was actually joined to the local domain.

We've now upgraded all the workstations and joined them to the domain properly.

The server was already setup for My Documents redirection, which of course wasn't working before because no one was joined to the domain.

However, now it is working and users files have been copied to the server, I've realised that the server has been setup to redirect to a non-standard user documents location - and all the permissions are wrong.

What's the best way to resolve this and get all the permissions back as they should be?

There appear to be a number of options to me, namely:

1. Simply change the Client Document Redirection settings to save files to the default shared user directory, which has the correct permissions setup
2. Change the default shared user directory to the directory that is currently being used for redirection (sure there is a standard method for doing this).  Would I need to stop redirection first, change the default shared folder, then restart redirection?
3. Change permissions on the current folder that's being used for redirection?  Presumably that would have to be done manually.

Ideally, I'd like to leave the files where they are as they're on a different disk to the system drive.

Any advice?
LVL 1
devon-ladAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

dfxdeimosCommented:
How many users do you have?
0
Adam GrahamEnterprise ArchitectCommented:
I don't see any reason you should have to move the files/folders. If they have been re-directed, all be it to a non 'standard' location, it means the folder redirection is working. Has this been accomplished via a manually created GPO or via the SBS option in Server Management --> Backup --> Configure My Documents Redirection?

In either case all you need to do is set the NTFS permissions correctly on the root folder and then replicate them down through the folder structure.

Adam
0
devon-ladAuthor Commented:
dfxdeimos - 12 users

18526 - Using the SBS option.  Can you clarify what permissions I need to set on the root folder so that each subfolder can only be accessed by the relevant user?  Because the permissions are different for each subfolder, I assumed I'd have to do this manually.
0
Adam GrahamEnterprise ArchitectCommented:
Here is an extract from the SBS help file, I think this is what you are looking for.

_____________________________________________________

When you enable folder redirection, the My Documents folder is redirected to the folder called Users Shared Folders by default. If you redirect the My Documents folder to another location, you need to first set the correct permissions on the folder.

To set permissions on the shared network folder where each user's My Documents folder is redirected

Click Start, and then click Windows Explorer.
Right-click the folder to which you want to redirect the user's My Documents folder, and then click Sharing and Security. On the Sharing tab, choose Share this folder, click Permissions. Add the following users and groups if they are not present, and then assign them Full Control permissions:

Domain Users
Domain Admins
SBS Folder Operators

Note;

It is recommended that you remove any previous users or groups from the list of group or user names.
On the Security tab, click Advanced, and then clear the check box for Allow inheritable permissions from the parent to propagate to this object and all child objects. When prompted for how to assign the permissions, click Remove. Click Add, add the following users and groups if they are not present, and then assign them Full Control permissions:

Creator Owner
Domain Admins
SBS Folder Operators
SYSTEM

Click Add, and then type Domain Users. In the Permissions Entry for All Users dialog box, click the Apply onto drop down box, click This folder only, and then select the following:

List Folder/Read Data
Read Attributes
Create Folders/Append Data
_____________________________________________________

Hope that helps

Adam
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
devon-ladAuthor Commented:
That appears to have done it - thanks.  
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
SBS

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.