Solved

Permissions on Main Redirected Folder

Posted on 2013-11-15
5
444 Views
Last Modified: 2014-09-24
I have been trying to set up redirected folders on a Windows 2012 Server with a mix of XP and Windows 7 Clients. I set up the main folder on the server and call it RedirFldrs. I share it and give Everyone full permissions to the share and disable inheritance. I them give the following NTFS Permissions:

Administrators - Full - This folder, subfolders and files
System              - Full - This folder, subfolders and files
Creator              - Full - Subfolders and files
Authenticated Users - Read and Create Folder - This folder only

The problem is that when a user logs in and it creates his folder he only has full control to his main folder, not subfolders and files. That is not correct. For some reason it won't let me give Creators (above) full - This folder, subfolders and files. It will only let me give Creator Full - Subfolders and Files

I have been having to go in to each users folder, disabling inheritance, and specifying that that get full control to this folder, subfolders and files. I have found a lot of articles on this but none are really crystal clear on the rights I need to assign to the main RedirFldrs. There articles try and limp in home folders and a few other things. I obviously have something messed up because users need full control to their folder, subfolders and files.

Can someone point me to a clear, concise documents on how to set up the correct permissions on the main RedirFldrs so that the ensuing users have full control to their individual folder, subfolders and files?
0
Comment
Question by:LockDown32
  • 2
  • 2
5 Comments
 
LVL 6

Accepted Solution

by:
Biniek earned 500 total points
ID: 39652625
Have You tried this ?


Configuring additional settings for the redirected folder


In the Settings tab in the Properties box for a folder, you can enable these settings:
•Grant the user exclusive rights . This setting is enabled by default and is a recommended setting. This setting specifies that the administrator and other users do not have permissions to access this folder.


•Move the contents of [FolderName] to the new location . This setting moves all the data the user has in the local folder to the shared folder on the network.


•Also apply redirection policy to Windows 2000, Windows 2000 Server, Windows XP, and Windows Server 2003 operating systems . This enables folder redirection to work withWindows 7 and Windows Vista, and earlier Windows operating systems. This option applies only to redirectable folders in earlier Windows operating systems, which are the Application Data , Desktop , My Documents , My Pictures , and Start Menu folders.


http://technet.microsoft.com/en-us/library/cc732275.aspx
0
 

Expert Comment

by:ITConnection
ID: 40342465
I'm having this same problem.  I feel that if I could set the "CREATOR OWNER" permission to "Full Control - This Folder, Subfolders and Files" it would work, but whenever I set the permissions it sets it back to "Subfolders and files only".  

I don't think that selecting the GPO setting to give the user exclusive rights is a solution as that is not normally required and is not an option in our environment.  

Has anyone had success in setting up redirected folders in server 2012 without setting the above GPO setting?

I should mention I'm using these settings:
http://technet.microsoft.com/en-us/library/jj649078.aspx#FolderRedirection_Step1Createafolderredirectionsecuritygroup
however I've looked at a lot of different sites from Microsoft and the web and they all say my current settings should work.
0
 
LVL 15

Author Comment

by:LockDown32
ID: 40342508
@ITConnection it has been a while and I think your links at the same but I used this one:

http://technet.microsoft.com/en-us/library/cc736916(v=ws.10).aspx

and everything seems to be OK now....
0
 

Expert Comment

by:ITConnection
ID: 40342912
Thanks, I got this working now.  The issue ended up being something with offline files, not how this is setup.  It was setup correctly using those instructions.  It's just odd because the permissions for the user show as special permissions, but everything the user creates they have full permissions on so it works.
0
 
LVL 15

Author Comment

by:LockDown32
ID: 40342929
It is odd. What kept throwing me was that when I logged in to the server and copied something to their refirected folder they didn't have permissions to access is because only creator/owner has access to it and they weren't the creator/owner of the things I copied to it when logged in as administrator. I started going back and adding the user to the root of their redirected folder and giving them full. Pretty annoying. Glad you got it working.
0

Featured Post

What Security Threats Are You Missing?

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

Recently, I was assigned the task of performing a hardware refresh in the datacenter. The previous Windows 2008 systems were connected to the SAN via fiber channel HBA’s and among other thing, had PowerPath installed in order to provide sufficient f…
Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
In this Micro Tutorial viewers will learn how to restore their server from Bare Metal Backup image created with Windows Server Backup feature. As an example Windows 2012R2 is used.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

27 Experts available now in Live!

Get 1:1 Help Now