Solved

Folder Share Question

Posted on 2014-03-05
7
409 Views
Last Modified: 2014-03-12
I have some network shares set up thru a group policy for users.  When users log on, they have access to a drive letter mapped to their PC.  For example (\\servername\users)(V:) so they go to this "V" drive and they can write to this "drive".  However, if a user maps just \\servername\users, he will see and have full access to all other users' folders in addition to his folder.  How do I prevent this.
0
Comment
Question by:Jack Seaman
  • 3
  • 2
  • 2
7 Comments
 
LVL 13

Expert Comment

by:Santosh Gupta
ID: 39907925
Please share which type of permission you have configured and which group you want to set.
0
 

Author Comment

by:Jack Seaman
ID: 39908037
Currently it is all domain users have full access.  I want only the user of the folder to have access.
0
 
LVL 13

Accepted Solution

by:
Santosh Gupta earned 500 total points
ID: 39908062
Make sure you have proper backup before performing below action

On users folder, go to advanced security and uncheck all permissipn for domain users except list folder and traverse folder permission. Check replace permission to child folders.

Now you shold have permission in place.
0
What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

 
LVL 2

Expert Comment

by:Satheesh Agatheeswaran
ID: 39908427
Try using the Access Based Enumeration for Folder Sharing
0
 

Author Comment

by:Jack Seaman
ID: 39908986
I don't think ABE will work because I want to prevent users from accessing other user folder.  Currently all users folders have all domain users in them.  It should only be the owner of the folder.
0
 
LVL 13

Expert Comment

by:Santosh Gupta
ID: 39908994
@wjseaman, did you get time to check my post. I think it should work.
0
 
LVL 2

Expert Comment

by:Satheesh Agatheeswaran
ID: 39910999
ABE is really useful in your Scenario, you can use the Domain Users with the special permission settings of the Master Folder to "List this folder only" then the user folders will be set to "List this folder and subfolders" / Full control to the corresponding users.

we deploy a shared drive with 46 sets of folders with 18 subfolders where the Support team can see only 46 Folders and inside only 1 folder name called (Support). All the other teams cant view the support folder & Support team can view the rest of the folders even if they use the link. Also, ABE must be deployed using DFS otherwise its not effective
0

Featured Post

Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
SYSLOG message format 3 46
DFS Replication in Another Domain 3 55
Auto Login Script 3 40
Virtual Machine Consolidation needed status 6 98
Scenario:  You do full backups to a internal hard drive in either product (SBS or Server 2008).  All goes well for a very long time.  One day, backups begin to fail with a message that the disk is full.  Your disk contains many, many more backups th…
Redirected folders in a windows domain can be quite useful for a number of reasons, one of them being that with redirected application data, you can give users more seamless experience when logging into different workstations.  For example, if a use…
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

813 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now