Folder Share Question

I have some network shares set up thru a group policy for users.  When users log on, they have access to a drive letter mapped to their PC.  For example (\\servername\users)(V:) so they go to this "V" drive and they can write to this "drive".  However, if a user maps just \\servername\users, he will see and have full access to all other users' folders in addition to his folder.  How do I prevent this.
Jack SeamanAsked:
Who is Participating?
 
Santosh GuptaConnect With a Mentor Commented:
Make sure you have proper backup before performing below action

On users folder, go to advanced security and uncheck all permissipn for domain users except list folder and traverse folder permission. Check replace permission to child folders.

Now you shold have permission in place.
0
 
Santosh GuptaCommented:
Please share which type of permission you have configured and which group you want to set.
0
 
Jack SeamanAuthor Commented:
Currently it is all domain users have full access.  I want only the user of the folder to have access.
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
Satheesh AgatheeswaranSystems & Network AdministratorCommented:
Try using the Access Based Enumeration for Folder Sharing
0
 
Jack SeamanAuthor Commented:
I don't think ABE will work because I want to prevent users from accessing other user folder.  Currently all users folders have all domain users in them.  It should only be the owner of the folder.
0
 
Santosh GuptaCommented:
@wjseaman, did you get time to check my post. I think it should work.
0
 
Satheesh AgatheeswaranSystems & Network AdministratorCommented:
ABE is really useful in your Scenario, you can use the Domain Users with the special permission settings of the Master Folder to "List this folder only" then the user folders will be set to "List this folder and subfolders" / Full control to the corresponding users.

we deploy a shared drive with 46 sets of folders with 18 subfolders where the Support team can see only 46 Folders and inside only 1 folder name called (Support). All the other teams cant view the support folder & Support team can view the rest of the folders even if they use the link. Also, ABE must be deployed using DFS otherwise its not effective
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.