Re: Permissions to Home Directory

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Glenn,

You need to check the NTFS file permissions for the DoeJ folder. I think
you'll find Everyone there someplace. Remove Everyone. Start with DoeJ,
Administrators, and System with Full Control. You can tighten things down
later.

There may be a better way, but this works for me. The 'Homes' folder is
shared with Everyone - Full Control. The NTFS file permissions for the
'Homes' folder are; Administrators, Everyone, and System - Full Control.
When you create a new user, UserN, the 'UserN' folder will have;
Administrators, Everyone, System, and UserN - Full Control. When your're
done setting up remove the permissions for Everyone from 'UserN'.

Cleve

"Glenn" <nospam@xxxxxxxxx> wrote in message
news:OemONfppGHA.4424@xxxxxxxxxxxxxxxxxxxxxxx
I changed share permssions to Everyone - Full Control. That worked for
DoeJ.

However, I then logged on as SmithB and was able to navigate to
\\homes\DoeJ and change his files.

How can I set it so that only DoeJ can see/change his files?

"Cleve S." <admin@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:O1JK0RppGHA.1548@xxxxxxxxxxxxxxxxxxxxxxx
Glenn,

Windows Server 2003 shares are Everyone - Read by default. Try changing
the share permissions to Everyone - Full Control. You then control
access with NTFS permissions. This is why the user can access his files
when logged in locally, but not from the network.

Cleve

"Glenn" <nospam@xxxxxxxxx> wrote in message
news:Oss$D$opGHA.4188@xxxxxxxxxxxxxxxxxxxxxxx
I haven't used home directories before on the Windows 2003 server, but
would like to start.

I created a new user, have it map h: to his home directory.

I've created a folder called homes, and a subfolder for the user (DoeJ).
I've given DoeJ full rights to his folder.

When I logon as DoeJ, it connects H: to homes\doej as it should, but it
doesn't let me save, modify, create, etc.

At the server I can create a test file and put it in doej's folder.
DoeJ can see, and even open the file. But he can't modify it.

I've checked the rights for the DoeJ folder several times and Full
Rights are in fact checked.

As for the "Homes" directory, that is "Shared" and everyone has read
rights.

What am I doing wrong?







.

Relevant Pages

  • Re: Permissions to Home Directory
    ... I changed share permssions to Everyone - Full Control. ... How can I set it so that only DoeJ can see/change his files? ... I've created a folder called homes, and a subfolder for the user. ... I've checked the rights for the DoeJ folder several times and Full Rights ...
    (microsoft.public.windows.server.active_directory)
  • Re: Disk security settings
    ... I believe you can pretty safely change anything you want on any folder ... Run, MMC, adding the Security Configuration and Security Templates snap-ins. ... NTFS file permissions is only one part of securing a system from misuse. ...
    (microsoft.public.win2000.security)
  • Re: Permissions to Home Directory
    ... You then control access with ... I've created a folder called homes, and a subfolder for the user (DoeJ). ... I've checked the rights for the DoeJ folder several times and Full Rights ...
    (microsoft.public.windows.server.active_directory)
  • Re: how to restrict or deny hard drive(s) access for guests/users accounts
    ... >What are you want to look at is NTFS file permissions. ... >Folder Options, click the view tab, and UNCHECK "use ... >select properties and edit their security programs (do ...
    (microsoft.public.windowsxp.security_admin)
  • Re: how to restrict or deny hard drive(s) access for guests/users accounts
    ... What are you want to look at is NTFS file permissions. ... Folder Options, click the view tab, and UNCHECK "use simple filesharing". ... select properties and edit their security programs (do that under ...
    (microsoft.public.windowsxp.security_admin)