Re: Security Entries for "My Documents" folders .

From: Les Connor [SBS Community Member - SBS MVP] (les.connor_at_DEL.cfive.ca)
Date: 01/13/05


Date: Thu, 13 Jan 2005 09:11:28 -0600

You can reset the permissions manually:

The permission for the Users Shared Folder

NTFS:
Domain Admins Full Control
Domain Users Special - Allow: Traverse Folder/Execute Files, List
Folder/Read Data, Read Attributes, Read Extended Attributes, Create
Folders/Append
Data, Read Permissions
System Full Control
SBS Folder Operators Full Control

Sharing:
Domain Admins, Domain Users, SBS Folder Operators: Full Control

Individual Users Folder.
NTFS:
Domain Admin Full Control (Inherited)
System Full Control (Inherited)
SBS Folder Operators Full Control (Inherited)
Individual user Full Control (Not Inherited)

-- 
Les Connor [SBS Community Member - SBS MVP]
-----------------------------------------------------------
SBS Rocks !
"quiverlesslg" <quiverlesslg@discussions.microsoft.com> wrote in message 
news:3C21A213-DAC9-4B42-8179-AC5220FD1EDD@microsoft.com...
> I'm stumbling into this late, but I've moved the "Users" share to the D 
> drive
> without prior knowledge of the x-copy method.  Each of the users shares 
> (i.e.
> Users\clientname) is now available to all clients.
>
> What are the express security rights that should be assigned to both the
> "Users" folder and the "Users\clientname" folder individually?
>
> Maybe a better way to ask this is what are each of the "Users\clientname"
> folders permission and security settings when the folder is first created 
> on
> an SBS2003 install (i.e. the default settings)?
>
> I tried to create a new user with the wizard after moving and re-sharing 
> the
> drives (the wrong way) and those settings are not apparent.  All users 
> still
> have access to this new folder.
>
> Thanks in advance for any help.
>
> "Les Connor" wrote:
>
>> Whoops !. There's a *way* to move them.
>>
>> Here's a previous post on moving data folders on SBS2k3.
>>
>> http://groups.google.ca/groups?hl=en&lr=&selm=Oc7k9dVFEHA.1268%40TK2MSFTNGP12.phx.gbl
>>
>> And the section you might now need, if you cut/pasted the users share to 
>> a
>> different drive.
>>
>> The permission for the Users Shared Folder
>>
>> NTFS:
>> Domain Admins Full Control
>> Domain Users Special - Allow: Traverse Folder/Execute Files, List
>> Folder/Read Data, Read Attributes, Read Extended Attributes, Create
>> Folders/Append
>> Data, Read Permissions
>> System Full Control
>> SBS Folder Operators Full Control
>>
>> Sharing:
>> Domain Admins, Domain Users, SBS Folder Operators: Full Control
>>
>> Individual Users Folder.
>> NTFS:
>> Domain Admin Full Control (Inherited)
>> System Full Control (Inherited)
>> SBS Folder Operators Full Control (Inherited)
>> Individual user Full Control (Not Inherited)
>>
>>
>> -- 
>> Les Connor [SBS Community Member]
>> -------------------------------------
>> SBS Rocks !
>>
>>
>>
>> "Bill Williams (DHL)" <BillWilliamsDHL@discussions.microsoft.com> wrote 
>> in
>> message news:549547F5-A71D-42E2-81AD-380C86259799@microsoft.com...
>> > What should the security entries be for each user folder within the 
>> > share
>> > colled Users on SBS2003. This share is used to hold the redirected "My
>> > Documents" folders of the users.
>> >
>> > I feel sure that these should be set to allow only the relevant user to
>> > access the relevant user folder, but somehow on my system the 
>> > permissions
>> > have become lax in the process of moving the share from drive C to 
>> > drive
>> > D.
>> >
>> > Bill Williams.
>> >
>>
>>
>> 


Relevant Pages