Re: Redirected Folder permissions problem

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

This is not a group policy issue, but a security issue.

It sounds to me that you would have to manually assign individual users
permissions to the Desktop Folder for the associated user.
"Gordon Price" <GordonPrice@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:7C608C42-3313-4C4A-9FCE-F9C24EC30031@xxxxxxxxxxxxxxxx
I am redirecting My Documents and Desktop, and I have dealt with
permissions
as follows.

On the share, I have "Full Control" on "This Folder, subfolders and files"
for Administrators, System and Creator Owner. Then I have "Read Extended
Attributes", "Create Folders/Append Data" and "Read Permissions" on "This
folder only" for Authenticated Users.
Mostly this works, as users can't access other people's desktops,
Administrators can access everything, and the permissions are done
automatically when the user's folder is first created on logon.
However, I have one problem. I am using Scan Router to scan to PDF from
our
copiers, and the Scan Router software, running as Administrator, moves the
resulting PDF to the user desktop folder. However, since the user is not
the
Creator Owner, they can't open the file. Also, I will often dump a file to
a
user Desktop, which is again not usable with these permissions.
So, what permissions, if any, can I add to Authenticated Users that will
allow them to open files without being able to also get into other
people's
folders? It seems like this wuld be a common issue, but not of my Group
Policy books make reference. They seem to assume that all files on the
user's
Desktop are created by them, which is not the case here.

Thanks,
Gordon


.

Relevant Pages

  • Re: DOS progam will not run with Limited Rights User
    ... problem to his desktop folder in his user profile that by default would be ... help if you need details on configuring permissions and taking ownership. ... click the icon on their desktop and the DOS program launches. ... user with limited rights tries to launch the same DOS program from the ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Folder Security sporadically working
    ... GPO based filesystem permissions are ... Because of the complexity of our organization, desktop folder ... mandatory profiles and roaming profiles are not an option ...
    (microsoft.public.windows.group_policy)
  • Re: Help with un-trashable file needed.
    ... your Desktop folder) ... on your desktop together with their permissions) ... this (I assume you don't have root access or sudo access BTW - if you ... chmod a+rw [filename] ...
    (uk.comp.sys.mac)
  • Re: shortcuts
    ... A user will need write permissions to add a shortcut. ... desktop you can configure their desktop folder in their user profile under documents ... I don't know of a registry/GPO setting to prevent just ...
    (microsoft.public.win2000.security)
  • Re: FTP problem with more than 2 users configured
    ... After this I ran Filemon and set it to filter on "inetinfo". ... I think you'll agree that file permissions are not the issue here. ... >> began after the installation of Exchange Server 2003. ... >> computer from the network' for other users with the Group Policy ...
    (microsoft.public.inetserver.iis.ftp)