Re: Re: Re: Re: Re: Re: Gradually migrate from Win2000 to Win200

From: lforbes (UseLinkToEmail_at_WindowsForumz.com)
Date: 01/01/05 

Date: 1 Jan 2005 18:16:37 -0500

Hi,

> Why ever would you transfer the discussion to "pre-set". The
question
> under discussion is do they have a use for some people some of the
> time -- the answer is clearly yes, as even you have convinced
yourself
> and written once you thought it through.

I am not saying Microsoft should do away with having Share
Permissions. I agree, they are useful for others maybe more than
myself. However, I am just saying they caused a lot less trouble when
they weren’t defaulted to "read only" for everyone. When they were
"everyone = full control" then they didn’t mess with access of
administrators, users to their home folders etc.

For example, I have 2500 Users. I create hundreds of shares for users
home directories, applications that need shared directories, group
shared directories . Now everytime I create a share, I have to
manually remember to go in and change the share permissions back to
Full Control. As my NTFS permissions are inherited they are created
automatically when the folder is created. If I forget the share
permissions, then the application doesn’t work, etc and I have to come
in on my day off to reset the share permissions.

Microsoft made such a big deal about "secure out of the box" with
Windows 2003. I think that was a great idea, but in this one case they
went a little overboard.

Security is a good thing but not letting users access their own home
directories or their profiles by default is just a little over the
top.

Cheers,

Lara 

-- 
http://www.WindowsForumz.com/  This article was posted by author's request
Articles individually checked for conformance to usenet standards
Topic URL: http://www.WindowsForumz.com/Active-Directory-Gradually-migrate-Win2000-Win2003-AD-ftopict242271.html
Visit Topic URL to contact author (reg. req'd).  Report abuse: http://www.WindowsForumz.com/eform.php?p=745087

Relevant Pages

  • Re: LanMan98 question
    ... Martin Longley wrote: ... now to access a couple of shared directories on the XP ... permissions on the C$ share, I don't think ou can remove it, and I ... access to your entire hard drive - actually all hard drives. ...
    (comp.sys.acorn.networking)
  • Re: Publicly accessible directory?
    ... different tastes in window furniture I have set us up as two users. ... to have our accounts, address books, etc. in shared directories. ... The owner, and user and world permissions are up to you, and the size ...
    (comp.os.linux.misc)
  • directory rights are disappeared and only administrator is shown
    ... I am using windows 2000 advanced server. ... Today, i have a strange ... problem related to my shared directories. ... permissions of the directoires, i saw that only administrator had the ...
    (microsoft.public.win2000.security)
  • Re: Why my users cant change their home folder permissions while they ...
    ... If they want to change the permissions in order to accomplish ... sharing, then provide server based sharing areas that meet their ... permission on their home folders, but one day they told me ... can't change z: drive permissions. ...
    (microsoft.public.windows.server.security)
  • Re: Permissions
    ... to create the home folders manually and assign permissions ... >> What's the best approach to the following scenario? ... >> permissions for each user eclusively. ... >> with Win2K3 permissions. ...
    (microsoft.public.windows.file_system)