Windows Search results display documents in folders user cannot open
Posted on 2014-10-27
A client's network is a mix of XP SP3 and Windows 7 machines in a domain with three W2K3 servers, one with the PDC emumulator and global catalog, the other a domain controller with shared folders and user profiles. A 3rd W2K3 runs SQL Server.
Users My Documents defaults to a share which is also available as their S: drive.
Several of the folders in the shared drive are limited to different user groups, for example only members of the executive group have access to financials.
While assisting a user who was not in the executive group via a remote session (so the system was using their credentials, not my administrative creds), I ran a search using Windows Search and noticed documents in the financials subfolder coming up and previewing data in the documents.
I opened Windows Explorer and attempted to open the financial folders, and as expected was denied access.
I then clicked on the link to the doc in Windows Search, and the document "downloaded" and opened.
Naturally I closed all this and got back to the original issue, resolved it, logged off and called the user to let them know everything was ready when they got back to the office.
I then repeated this on a couple of different systems using a test account. Same issue.
I'm thinking this must be solvable with a GPO profile setting but haven't been able to figure out what it would be.
Any Windows Search / Security masters out there with a suggestion?
We are working toward moving to 2K8/2K12 and retiring the last of the XPs. I can deploy a production 2K8 or 2K12 server immediately if need be.