Solved

User home folder permissions

Posted on 2011-02-12
4
632 Views
Last Modified: 2012-06-21
What are the correct permissions to set on the users home folder. I mean the parent folder as oppose to each users individual folder. I want to set this so when I add a home folder in the users account that they have permssion to their home folder only.
Also it would be good to know how to quickly recover from the scenario where by the users are able to see each others home folders due to the wrong permissions being set on the parent folder. I want a way of fixing this with out having to go to each users home folder and set the correct permissions. The o.s is 2008 server

Thanks
0
Comment
Question by:Sid_F
  • 2
4 Comments
 
LVL 59

Accepted Solution

by:
Darius Ghassem earned 500 total points
ID: 34880717
Here is a article on 2003 but the same permissions apply

http://support.microsoft.com/kb/555046

Also, another article about folder redirection.

http://technet.microsoft.com/en-us/library/cc785925(WS.10).aspx

It recommends not to use Home Folders.

Typically, it is recommended that you do not redirect to a home directory unless you have already deployed home directories in your organization
0
 
LVL 47

Expert Comment

by:dstewartjr
ID: 34881528
I believe what you are looking for is ABE(Access Based Enumeration)


ABE filters shared folders visible to a user based on that individual user's access rights, preventing the display of folders or other shared resources that the user does not have rights to access. ABE can be accessed via graphical user interface (GUI), command-line executable tool, and a robust advanced programming interface (API).


http://www.microsoft.com/windowsserver2003/techinfo/overview/abe.mspx



Implementing Access-Based Enumeration in Windows Server 2003 R2
http://www.windowsnetworking.com/articles_tutorials/Implementing-Access-Based-Enumeration-Windows-Server-2003.html
0
 
LVL 5

Author Closing Comment

by:Sid_F
ID: 35005446
thanks
0
 
LVL 47

Expert Comment

by:dstewartjr
ID: 35007851
"......where by the users are able to see each others home folders due to the wrong permissions being set on the parent folder"



The solution I provided takes care of this(ABE), with it installed users will only be able to see their own files/folders. Permissions alone will not do this.
0

Featured Post

The problems with reply email signatures

Do you wish that you could place an email signature under a reply? Well, unfortunately, you can't. That great Exchange/Office 365 signature you've created will just appear at the bottom of an email chain. What a pain! Is there really no way to solve this? Well, there might be...

Join & Write a Comment

If you migrate a Terminal Server licenses server inside the 2008 server family, you can takte advantage of the build-in migration tool. If you like to migrate an older 2003 Server (and the installed client CALs) to a 2008 R2 server for example, you …
A safe way to clean winsxs folder from your windows server 2008 R2 editions
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now