?
Solved

Issue with Home Folder permissions

Posted on 2011-03-11
7
Medium Priority
?
928 Views
Last Modified: 2012-06-27
Hello All;

I setup home folders for my users and it's working fine, the only issue is that all users have access to other peoples home directory.

I followed the doc http://www.itechtalk.com/thread1958.html 

For folder redirection to work properly, configure the NTFS as follows:

1) Configure the folder to not inherit permissions and remove all existing permissions.
2) Add the file server’s local Administrators group with Full Control of This Folder, Subfolders, and Files.
3) Add the Domain Admins domain security group with Full Control of This Folder, Subfolders, and Files.
4) Add the System account with Full Control of This Folder, Subfolders, and Files.
5) Add the Creator/Owner with Full Control of Subfolders and Files.
6) Add the Authenticated Users group with both List Folder/Read Data and Create Folders/Append Data – This Folder Only rights. The Authenticated Users group can be replaced with the desired group, but do not choose the Everyone group as a best practice.

The share permissions of the folder can be configured to grant administrators Full Control and authenticated users Change permissions.

But still all users have access to other people stuff

 For folder redirection to work properly, configure the NTFS as follows:  1) Configure the folder to not inherit permissions and remove all existing permissions. 2) Add the file server’s local Administ Permission-Entry-for-users

Can someone help?
0
Comment
Question by:atigris
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
7 Comments
 
LVL 18

Expert Comment

by:John Gates, CISSP
ID: 35124282
Ok.  Lets work with a single folder under this directory and one the settings are solid you can do the rest.

Create a new folder under the folder you have currently set up.  Remove all the permissions that are there and do not inherit from the parent folder.  Give a single user permissions to this folder.  Once you do this let me know if others are still able to access the contents of this folder.

-D-
0
 
LVL 18

Expert Comment

by:John Gates, CISSP
ID: 35124289
Also remember that share permissions and resource permissions are different.  Please let me know what you have the current share permissions set to.  With the settings I gave you above it will work even if you have everyone full control share permissions.

-D-
0
 
LVL 2

Accepted Solution

by:
atigris earned 0 total points
ID: 35241077
I start having some errors in the event log and I had to give "modify" permissions to everyone so their Folder re-direction work. Thanks for your help.
0
 
LVL 18

Expert Comment

by:John Gates, CISSP
ID: 35241145
I don't understand.  We were on the path of solving your problem.  Not sure why you want to close this at this point.

-D-
0

Featured Post

Create the perfect environment for any meeting

You might have a modern environment with all sorts of high-tech equipment, but what makes it worthwhile is how you seamlessly bring together the presentation with audio, video and lighting. The ATEN Control System provides integrated control and system automation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
An article on effective troubleshooting
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
Suggested Courses

800 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question