Home folders best practice question

Hi all,

I want to provide drive space for my users.
I'm new to Windows Server and I have two basic questions.

My first question:

I create a new folder (x:\home) and share it as Home$.
To which group should I give permission to access this share?
Everyone or Users (domain\users) or Authenticated Users or ...?
Should I give Change or Full Control permission?

Second question:

I open a user's properties in the Active Directory Users and Computers
console.
In the Home Folder section of the Profile tab I connect drive letter P to
\\myserver\home$\%username%
This creates a directory for the current user (x:\home\thisuser).
According to my MCSE training kit the user and the DOMAIN\Administrators are
assigned the NTFS Full Control permission to this directory.
All other permission should be removed.

The two full control permissions are created.
The inherited permission from the root of this NTFS (CREATE OWNER full
control permission, EVERYONE read permission and SYSTEM full control
permission) drive are stil there.

Should I change the NTFS permission of the x:\home folder?
Any suggestions?

I'm running Windows Server 2003 Enterprise Edition with all sevice packs
applied.
The NTFS partition is created on a hardware RAID-5 disk.


.

Relevant Pages
Loading