Re: win2k / win2k3 adminpak issue

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Matjaz Ladava [MVP] (matjaz_at__nospam_ladava.com)
Date: 04/05/04 

Date: Sun, 4 Apr 2004 21:11:05 -0700

Yes, this has changed from 2000 and in 2003 user folder inherits permission
of the parent. To control this behavior see
http://support.microsoft.com/default.aspx?scid=kb;en-us;817009 

-- 
Regards
Matjaz Ladava, MCSA, MCSE, MCT, MVP
Microsoft MVP Windows Server - Active Directory
matjaz@ladava.com, matjazl@mvps.org
"JoS" <lolmasternuthinlol@yahoo.com> wrote in message 
news:c4kroj$vbc$1@netnews.upenn.edu...
>I have noticed an anomaly in the functionality of the Adminpak for XP/2003
> and the Adminpak for win2k - specifically the AD U&C snap-in.
>
> When creating a user using the Win2k AD U&C snap-in and defining their 
> home
> dir location as \\FQDN\share\%username% the correct permissions will be 
> set
> on that home dir (ie. username and local (to the server hosting the share)
> admins Full Control).  This is correct by design.  But using the win2k3 AD
> U&C snap-in and defining the home dir location using the same syntax 
> results
> with incorrect permissions on the newly created home directory (in my
> situation it appears as if it is inheriting the perms from parent dir and
> then adding the specific user with Full Control).  The fileserver that 
> hosts
> the home dirs is a Win2k Server.  Has anyone else seen this?
>
> I can't imagine this is by design.
>
> Google, groups.google, and the MSKB have nothing on this.
>
> TIA,
>
> JoS
>
>

Relevant Pages

  • Re: Domain Users Cant Print to Networked Printer
    ... You might want to just set up a printer server and install it on your clients ... that way so you can control the permissions. ... remove the user from Domain Admins, that user can no longer print. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Need help with setting security permissions for IE hosted dll
    ... How to run a user control assembly hosted on an Internet Information Server ... permissions than would normally be granted to the zone the assembly belongs ...
    (microsoft.public.dotnet.security)
  • Re: Permissions on a home directory
    ... jonathanr wrote: ... > users home directories live was rebuilt to 2003 Server. ... Don't give users full control - modify is enough. ... > Permissions the user is reflected as having all the permissions ...
    (microsoft.public.win2000.security)
  • Re: Windows Form Socket Permission
    ... I was stupidly setting the permissions on the server, ... the control is to be ... security object to grant code permssions. ... This means that by default, the enterprise level can only restrict permissions, not grant new ones. ...
    (microsoft.public.dotnet.security)
  • Re: Publishing prompts for login
    ... Windows Server 2003" document from the MS download site, ... particular was the "roles.ini" file did not have the correct permissions. ... the roles.ini file was not inheriting permissions from the parent. ...
    (microsoft.public.frontpage.client)