Re: home folder management

Tech-Archive recommends: Speed Up your PC by fixing your registry

Not that I know of. However, my suggestion of using the share-level
permission to restrict the maximum permission to change makes the NTFS
permission irrelevant.

Oli


"gousers" <gousers@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:6A9A945D-7461-4786-9D6A-D9F59B0AB666@xxxxxxxxxxxxxxxx
> When you set the home drive path in AD for users and computers the system
> creates the user folder and automatically gives the user full control. I'd
> like for the access level to be "change". I'm looking for a way to
> automate
> it. Can this be done?
>
>
> "Oli Restorick [MVP]" wrote:
>
>> Agreed. A convenient place to use the change permissions is to set it at
>> the share level, which limits users' permissions to no more than change,
>> regardless of what the NTFS permissions say.
>>
>> Oli
>>
>>
>> "Eric Bursley" <ebursley at swbell dot net> wrote in message
>> news:%23YL01QLFGHA.3100@xxxxxxxxxxxxxxxxxxxxxxx
>> > If you assign users change permissions, it will allow them modify / add
>> > /
>> > remove files, but not remove permissions from the administrator. I use
>> > change permissions all the time. If things get a little out of hand,
>> > an
>> > administrator can assume ownership of the file and reset permissions.
>> >
>> >
>> > Eric Bursley
>> > Eric Bursley eric at bursley dot net
>> >
>> >
>> > "gousers" <gousers@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
>> > news:977B29F1-3D1A-4920-848D-BF8B788794F0@xxxxxxxxxxxxxxxx
>> >> I'd like add the objective.
>> >>
>> >> Need a way to ensure administrators can open and access every file.
>> >> Ensure
>> >> users can not lock administrators out.
>> >>
>> >> I don't think a user could ever completely lock out the administrator.
>> >> But
>> >> if scripts or other means are used to scan for files a users could
>> >> cause
>> >> the
>> >> scripts to miss their folder and I'm not sure the administrator would
>> >> know.
>> >>
>> >> Also wish to implement disk quotas at some point. I don't think folder
>> >> ownership affects quotas. I believe this is done at the file level and
>> >> I'm
>> >> attempting at this point to alter file ownership.
>> >>
>> >> Any methods appreciated.
>> >>
>> >> Thanks.
>> >>
>> >> "gousers" wrote:
>> >>
>> >>> Need insight on user home drive mangement.
>> >>>
>> >>> The concern is over the default action of windows giving the user
>> >>> both
>> >>> full
>> >>> permissions and ownership of the folder and administrators limited
>> >>> access.
>> >>>
>> >>> The desire is to automate somehow giving users only needed access and
>> >>> administrators full access and ownership.
>> >
>> >
>>
>>
>>


.

Relevant Pages

  • Re: FTP control
    ... > I would like to use NTFS security settings to control who ... I would suggest getting a third party FTP server, ... if you set quota and these permissions for that group you can ... Information Server (IIS) Web site, ...
    (microsoft.public.win2000.security)
  • RE: Any way to remove ADMIN$ only?
    ... Mixing the share permissions and the NTFS permissions generally cause ... which means more groups/people access the same shares. ... Along comes another admin that creates a share at a higher level in the ...
    (Focus-Microsoft)
  • Re: W2k and Front Page Security
    ... >> up now using subweb and setting permissions throgh ... >> with NTFS permissions contolling folders.When I set ... >FrontPage managed content areas you do really need to ... >authorship of every groupX subweb in addition ...
    (microsoft.public.win2000.security)
  • Re: Removing "File and Folder tasks"
    ... create a Group Policy to enforce the NTFS ... permissions, and then link it to that OU. ... Do NOT attempt to apply NTFS ... folder and user profile folders because if you incorrectly apply NTFS ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Removing "File and Folder tasks"
    ... You can put the computers you want to enforce the NTFS permissions on into ... create a Group Policy to enforce the NTFS ... folder and user profile folders because if you incorrectly apply NTFS ...
    (microsoft.public.windowsxp.security_admin)