Solved

User home folder permissions

Posted on 2011-02-12
4
638 Views
Last Modified: 2012-06-21
What are the correct permissions to set on the users home folder. I mean the parent folder as oppose to each users individual folder. I want to set this so when I add a home folder in the users account that they have permssion to their home folder only.
Also it would be good to know how to quickly recover from the scenario where by the users are able to see each others home folders due to the wrong permissions being set on the parent folder. I want a way of fixing this with out having to go to each users home folder and set the correct permissions. The o.s is 2008 server

Thanks
0
Comment
Question by:Sid_F
  • 2
4 Comments
 
LVL 59

Accepted Solution

by:
Darius Ghassem earned 500 total points
ID: 34880717
Here is a article on 2003 but the same permissions apply

http://support.microsoft.com/kb/555046

Also, another article about folder redirection.

http://technet.microsoft.com/en-us/library/cc785925(WS.10).aspx

It recommends not to use Home Folders.

Typically, it is recommended that you do not redirect to a home directory unless you have already deployed home directories in your organization
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 34881528
I believe what you are looking for is ABE(Access Based Enumeration)


ABE filters shared folders visible to a user based on that individual user's access rights, preventing the display of folders or other shared resources that the user does not have rights to access. ABE can be accessed via graphical user interface (GUI), command-line executable tool, and a robust advanced programming interface (API).


http://www.microsoft.com/windowsserver2003/techinfo/overview/abe.mspx



Implementing Access-Based Enumeration in Windows Server 2003 R2
http://www.windowsnetworking.com/articles_tutorials/Implementing-Access-Based-Enumeration-Windows-Server-2003.html
0
 
LVL 6

Author Closing Comment

by:Sid_F
ID: 35005446
thanks
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 35007851
"......where by the users are able to see each others home folders due to the wrong permissions being set on the parent folder"



The solution I provided takes care of this(ABE), with it installed users will only be able to see their own files/folders. Permissions alone will not do this.
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Normally after a failure of Domain Controller, when promoting new DC the DC is renamed, we will discuss the options in Dcpromo to re-create the DC with the same name. Scenario: You are a small IT shop with two Domain Controllers (Domain Contr…
We recently had an issue where out of nowhere, end users started indicating that their logins to our terminal server were just showing a "blank screen." After checking the usual suspects -- profiles, shell=explorer.exe in the registry, userinit.exe,…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

828 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question