Solved

Permissions on Main Redirected Folder

Posted on 2013-11-15
5
447 Views
Last Modified: 2014-09-24
I have been trying to set up redirected folders on a Windows 2012 Server with a mix of XP and Windows 7 Clients. I set up the main folder on the server and call it RedirFldrs. I share it and give Everyone full permissions to the share and disable inheritance. I them give the following NTFS Permissions:

Administrators - Full - This folder, subfolders and files
System              - Full - This folder, subfolders and files
Creator              - Full - Subfolders and files
Authenticated Users - Read and Create Folder - This folder only

The problem is that when a user logs in and it creates his folder he only has full control to his main folder, not subfolders and files. That is not correct. For some reason it won't let me give Creators (above) full - This folder, subfolders and files. It will only let me give Creator Full - Subfolders and Files

I have been having to go in to each users folder, disabling inheritance, and specifying that that get full control to this folder, subfolders and files. I have found a lot of articles on this but none are really crystal clear on the rights I need to assign to the main RedirFldrs. There articles try and limp in home folders and a few other things. I obviously have something messed up because users need full control to their folder, subfolders and files.

Can someone point me to a clear, concise documents on how to set up the correct permissions on the main RedirFldrs so that the ensuing users have full control to their individual folder, subfolders and files?
0
Comment
Question by:LockDown32
  • 2
  • 2
5 Comments
 
LVL 6

Accepted Solution

by:
Biniek earned 500 total points
ID: 39652625
Have You tried this ?


Configuring additional settings for the redirected folder


In the Settings tab in the Properties box for a folder, you can enable these settings:
•Grant the user exclusive rights . This setting is enabled by default and is a recommended setting. This setting specifies that the administrator and other users do not have permissions to access this folder.


•Move the contents of [FolderName] to the new location . This setting moves all the data the user has in the local folder to the shared folder on the network.


•Also apply redirection policy to Windows 2000, Windows 2000 Server, Windows XP, and Windows Server 2003 operating systems . This enables folder redirection to work withWindows 7 and Windows Vista, and earlier Windows operating systems. This option applies only to redirectable folders in earlier Windows operating systems, which are the Application Data , Desktop , My Documents , My Pictures , and Start Menu folders.


http://technet.microsoft.com/en-us/library/cc732275.aspx
0
 

Expert Comment

by:ITConnection
ID: 40342465
I'm having this same problem.  I feel that if I could set the "CREATOR OWNER" permission to "Full Control - This Folder, Subfolders and Files" it would work, but whenever I set the permissions it sets it back to "Subfolders and files only".  

I don't think that selecting the GPO setting to give the user exclusive rights is a solution as that is not normally required and is not an option in our environment.  

Has anyone had success in setting up redirected folders in server 2012 without setting the above GPO setting?

I should mention I'm using these settings:
http://technet.microsoft.com/en-us/library/jj649078.aspx#FolderRedirection_Step1Createafolderredirectionsecuritygroup
however I've looked at a lot of different sites from Microsoft and the web and they all say my current settings should work.
0
 
LVL 15

Author Comment

by:LockDown32
ID: 40342508
@ITConnection it has been a while and I think your links at the same but I used this one:

http://technet.microsoft.com/en-us/library/cc736916(v=ws.10).aspx

and everything seems to be OK now....
0
 

Expert Comment

by:ITConnection
ID: 40342912
Thanks, I got this working now.  The issue ended up being something with offline files, not how this is setup.  It was setup correctly using those instructions.  It's just odd because the permissions for the user show as special permissions, but everything the user creates they have full permissions on so it works.
0
 
LVL 15

Author Comment

by:LockDown32
ID: 40342929
It is odd. What kept throwing me was that when I logged in to the server and copied something to their refirected folder they didn't have permissions to access is because only creator/owner has access to it and they weren't the creator/owner of the things I copied to it when logged in as administrator. I started going back and adding the user to the root of their redirected folder and giving them full. Pretty annoying. Glad you got it working.
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I don't know if many of you have made the great mistake of using the Cisco Thin Client model with the management software VXC. If you have then you are probably more then familiar with the incredibly clunky interface, the numerous work arounds, and …
The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of installing of Data Protection Manager on a server running Windows Server 2012 R2, including the prerequisites. Microsoft .Net 3.5 is required. To install this feature, go to Server Manager…

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question