asked on

User home folder permissions

What are the correct permissions to set on the users home folder. I mean the parent folder as oppose to each users individual folder. I want to set this so when I add a home folder in the users account that they have permssion to their home folder only.
Also it would be good to know how to quickly recover from the scenario where by the users are able to see each others home folders due to the wrong permissions being set on the parent folder. I want a way of fixing this with out having to go to each users home folder and set the correct permissions. The o.s is 2008 server

Thanks

ASKER CERTIFIED SOLUTION

Darius Ghassem

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Don

I believe what you are looking for is ABE(Access Based Enumeration)

ABE filters shared folders visible to a user based on that individual user's access rights, preventing the display of folders or other shared resources that the user does not have rights to access. ABE can be accessed via graphical user interface (GUI), command-line executable tool, and a robust advanced programming interface (API).

http://www.microsoft.com/windowsserver2003/techinfo/overview/abe.mspx

Implementing Access-Based Enumeration in Windows Server 2003 R2
http://www.windowsnetworking.com/articles_tutorials/Implementing-Access-Based-Enumeration-Windows-Server-2003.html

Sid_F

ASKER

thanks

Don

"......where by the users are able to see each others home folders due to the wrong permissions being set on the parent folder"

The solution I provided takes care of this(ABE), with it installed users will only be able to see their own files/folders. Permissions alone will not do this.