RE: Roaming profiles directory permissions

Hi Nick,

Thanks for using this newsgroup.

According to your description, I understand that you want to change the
NTFS and sharing permission on user shared folder back to default. If I am
off base, please let me know.

Generally speaking, if you have not changed any other setting such as name
of the "User shared folder", you can just change the permission back to
return it to normal. Here I would like to give you a right permission list
for the user shared folder, you can check permission setting on user shared
folder to correct the wrong setting:

The permission for the Users Shared Folder

NTFS:
Domain Admins Full Control
Domain Users Special - Allow: Traverse Folder/Execute Files, List
Folder/Read Data, Read Attributes, Read Extended Attributes, Create
Folders/Append Data, Read Permissions
System Full Control
SBS Folder Operators Full Control

Sharing:
Domain Admins, Domain Users, SBS Folder Operators: Full Control

Individual Users Folder.

NTFS:
Domain Admin Full Control (Inherited)
System Full Control (Inherited)
SBS Folder Operators Full Control (Inherited)
Individual user Full Control (Not Inherited)

More info:

How to move the user shared information on SBS to another location:

http://download.microsoft.com/download/1/1/6/11671e4d-fb21-489c-870f-db36fd2
1a7d2/SBS_MoveDataFolders.DOC

Hope the above information helpful, if you have any further concerns,
please let me know. I am here waiting for your updates.

Best regards,

Charles Yang (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

.

Relevant Pages

  • Re: mydocuments missing after logff logon sbs2003 win xp
    ... For the roaming profile folder permission issue, ... Administrators: Full Control ...
    (microsoft.public.windows.server.sbs)
  • Re: Is there anyway I can stop users moving folders to other folders?
    ... Access Control Settings for DATA ... Permission Entry for DATA ... >move a folder just with that group membership. ... >> The person whose access I'm trying to restrict is a member of group ...
    (microsoft.public.win2000.security)
  • Re: Read Only Files
    ... Check the permission of the folder to see if the administrator is ... > Domain Admins Full Control ... > Domain Admins, Domain Users, SBS Folder Operators: ... > Online Partner Support ...
    (microsoft.public.windows.server.sbs)
  • RE: NTFS permissions isses
    ... Effective permissions shows that Domain Admins and local administrator ... I tried to recheck “Replace permission entries…” etc and got an error ... I was not able to delete the folder until I unshared it and went to Owner ... is given modifyable control and Administrator and Domain admins have full ...
    (microsoft.public.security)
  • Re: Network shares cannot connect
    ... Changed value to 0 just waiting to re-boot the server and test logins. ... Workstation Name: - ... let's focus on the Users Shared Folder first. ... To check this permission, please click the Advanced button, select ...
    (microsoft.public.windows.server.sbs)