Solved

How to set correct permissions on existing redirected folders

Posted on 2008-10-31
5
629 Views
Last Modified: 2008-11-03
We've recently taken over the IT support for a company that has an SBS 2003 server and a dozen XP/Vista PCs and laptops.

The company that originally supplied them with the PCs and laptops gave them Home editions of both XP and Vista - so of course, no one was actually joined to the local domain.

We've now upgraded all the workstations and joined them to the domain properly.

The server was already setup for My Documents redirection, which of course wasn't working before because no one was joined to the domain.

However, now it is working and users files have been copied to the server, I've realised that the server has been setup to redirect to a non-standard user documents location - and all the permissions are wrong.

What's the best way to resolve this and get all the permissions back as they should be?

There appear to be a number of options to me, namely:

1. Simply change the Client Document Redirection settings to save files to the default shared user directory, which has the correct permissions setup
2. Change the default shared user directory to the directory that is currently being used for redirection (sure there is a standard method for doing this).  Would I need to stop redirection first, change the default shared folder, then restart redirection?
3. Change permissions on the current folder that's being used for redirection?  Presumably that would have to be done manually.

Ideally, I'd like to leave the files where they are as they're on a different disk to the system drive.

Any advice?
0
Comment
Question by:devon-lad
  • 2
  • 2
5 Comments
 
LVL 14

Expert Comment

by:dfxdeimos
Comment Utility
How many users do you have?
0
 
LVL 9

Expert Comment

by:18526
Comment Utility
I don't see any reason you should have to move the files/folders. If they have been re-directed, all be it to a non 'standard' location, it means the folder redirection is working. Has this been accomplished via a manually created GPO or via the SBS option in Server Management --> Backup --> Configure My Documents Redirection?

In either case all you need to do is set the NTFS permissions correctly on the root folder and then replicate them down through the folder structure.

Adam
0
 
LVL 1

Author Comment

by:devon-lad
Comment Utility
dfxdeimos - 12 users

18526 - Using the SBS option.  Can you clarify what permissions I need to set on the root folder so that each subfolder can only be accessed by the relevant user?  Because the permissions are different for each subfolder, I assumed I'd have to do this manually.
0
 
LVL 9

Accepted Solution

by:
18526 earned 500 total points
Comment Utility
Here is an extract from the SBS help file, I think this is what you are looking for.

_____________________________________________________

When you enable folder redirection, the My Documents folder is redirected to the folder called Users Shared Folders by default. If you redirect the My Documents folder to another location, you need to first set the correct permissions on the folder.

To set permissions on the shared network folder where each user's My Documents folder is redirected

Click Start, and then click Windows Explorer.
Right-click the folder to which you want to redirect the user's My Documents folder, and then click Sharing and Security. On the Sharing tab, choose Share this folder, click Permissions. Add the following users and groups if they are not present, and then assign them Full Control permissions:

Domain Users
Domain Admins
SBS Folder Operators

Note;

It is recommended that you remove any previous users or groups from the list of group or user names.
On the Security tab, click Advanced, and then clear the check box for Allow inheritable permissions from the parent to propagate to this object and all child objects. When prompted for how to assign the permissions, click Remove. Click Add, add the following users and groups if they are not present, and then assign them Full Control permissions:

Creator Owner
Domain Admins
SBS Folder Operators
SYSTEM

Click Add, and then type Domain Users. In the Permissions Entry for All Users dialog box, click the Apply onto drop down box, click This folder only, and then select the following:

List Folder/Read Data
Read Attributes
Create Folders/Append Data
_____________________________________________________

Hope that helps

Adam
0
 
LVL 1

Author Comment

by:devon-lad
Comment Utility
That appears to have done it - thanks.  
0

Featured Post

Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

Join & Write a Comment

The SBS 2011 release date (RTM) is supposed to be around Christmas, 2011.  This article is a compilation of my notes -- things I have learned first hand.  The items are in a rather random order, but I think this list covers most of what is new and d…
You may have discovered the 'Compatibility View Settings' workaround for making your SBS 2008 Remote Web Workplace 'connect to a computer' section stops 'working around' after a Windows 10 client upgrade.  That can be fixed so it 'works around' agai…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now