Re: Users access folrders

Hi,



How about you try my suggestion? Does it hit your concern?



By default, when you add a user account using Add User Wizard (Server
Management console ->Users), there is a same name folder with the user
account will be created in Users Shared folders, which is the user account
home folder and the folder can be accessed by only the user account and
doman admin.



What is your meaning of ¡®i can't remove domain users from the share folder
and

if i disable inhiritable permission it looks like i have to add people

manualy¡¯? which share folder you pointed to? Is it the Users Shared
folders?

Please give me more information in order to the efficient resolution.



Additionally I correct one mistake in my initial response.



*****************

K. Type the following command to refresh the group policy settings:



SECEDIT /REFRESHPOLICY USER_POLICY /ENFORCE

******************

This command only apply to Windows NT and before. In Windows Xp, we need use
following command to refresh the group policy settings:



Gpupdate [/target:{computer|user}] [/force]



Parameters

/target:{computer|user}



Processes only the computer settings or the current user settings. By
default, both the computer settings and the user settings are processed.



/force



Ignores all processing optimizations and reapplies all settings. The Group
Policy engine on the client tracks versions of the GPOs that are applied to
the user and computer. By default, if none of the GPO versions change and
the list of GPOs remains the same, the Group Policy engine will not
reprocess policy. This option overrides this optimization and forces the
Group Policy engine to reprocess all policy information.



/?



Displays help at the command prompt.



Hope above information helps! If you have any further concern or question on
the issue please feel free to let me know. I am looking forward to you!



Have a nice day!



Best Regards,



Jenny Wu

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

======================================================

This newsgroup only focuses on SBS technical issues. If you have issues

regarding other Microsoft products, you'd better post in the corresponding

newsgroups so that they can be resolved in an efficient and timely manner.

You can locate the newsgroup here:

http://www.microsoft.com/communities/newsgroups/en-us/default.aspx



When opening a new thread via the web interface, we recommend you check the

"Notify me of replies" box to receive e-mail notifications when there are

any updates in your thread. When responding to posts via your newsreader,

please "Reply to Group" so that others may learn and benefit from your

issue.



Microsoft engineers can only focus on one issue per thread. Although we

provide other information for your reference, we recommend you post

different incidents in different threads to keep the thread clean. In doing

so, it will ensure your issues are resolved in a timely manner.



For urgent issues, you may want to contact Microsoft CSS directly. Please

check http://support.microsoft.com for regional support phone numbers.



Any input or comments in this thread are highly appreciated.

======================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

---------------------------------------------------------
""Jenny wu [MSFT]"" <v-yanniw@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:2fR$V1YoFHA.3120@xxxxxxxxxxxxxxxxxxxxxxxx
> Hi,
>
> Thanks for posting here!
>
> For your description, I understand that you want to know how to set
> exclusive access permission to user's my document. If I am off base,
> please
> don't hesitate to let me know.
>
> To make sure that only the user and the domain administrators have
> permissions to open a particular redirected folder, do the following:
>
> 1. Select a central location in your environment where you would like to
> store Folder Redirection, and then share this folder. In this example,
> FLDREDIR is used.
>
> 2. Set Share Permissions for the Everyone group to Full Control.
>
> 3. Use the following settings for NTFS Permissions: o CREATOR OWNER - Full
> Control (Apply onto: Subfolders and Files Only)
>
> **** System - Full Control (Apply onto: This Folder, Subfolders and Files)
> **** Domain Admins - Full Control (Apply onto: This Folder, Subfolders and
> Files)
> ****Everyone - Create Folder/Append Data (Apply onto: This Folder Only)
> ****Everyone - List Folder/Read Data (Apply onto: This Folder Only)
> ****Everyone - Read Attributes (Apply onto: This Folder Only)
> ****Everyone - Traverse Folder/Execute File (Apply onto: This Folder Only)
>
> 4. Configure Folder Redirection Policy as outlined in Windows Help. Use a
> path similar to \\server\FLDREDIR\username to create a folder under the
> shared folder, FLDREDIR. The detail steps are:
>
> A. Open Active Directory Computers and Users snap-in.
> B. Open the Group Policy edit window (as your requirement)
>
> a. Locate the appropriate OU or container and click Properties.
> b. In the Group Policy tab, create a new group policy, and click Edit to
> open the Group Policy edit window.
>
> Or you can locate the default group policy in Group Policy Management
> (Server Management console -> Advanced Management -> Group Policy
> Management) and then right click it to click Edit to open the Group Policy
> edit window
>
> C. Locate the following group policy:
> [User Configuration\Windows Settings\Folder Redirection\My documents]
> D. Right click 'My documents', and then click Properties.
> E. Select "Advanced settings: Specify locations for various user groups".
> F. Click Add to select the user group that you want to restrict
> permission,
> and specify the FLDREDIR share folder as \\server\ FLDREDIR .
> G. Select the Settings property page, and click to check the "Grant user
> exclusive rights to my documents". You can also configure other settings
> according to your requirement.
> H. Close all windows.
> I. Click Start, and click Run.
> G. Type "cmd" in the text box, and click OK.
> K. Type the following command to refresh the group policy settings:
>
> SECEDIT /REFRESHPOLICY USER_POLICY /ENFORCE
>
> 5. Logon as a user in the group to test.
>
> Because the Everyone group has the Create Folder/Append Data right, the
> group members have the proper permissions to create the folder; however,
> the members are not able to read the data afterwards. The Username group
> is
> the name of the user that was logged on when you created the folder.
> Because the folder is a child of the parent folder, it inherits the
> permissions that you assigned to FLDREDIR. Also, because the user is
> creating the folder, the user gains full control of the folder because of
> the Creator Owner Permission setting.
>
> For additional information, click the article number below to view the
> article in the Microsoft Knowledge Base:
> How to dynamically create security-enhanced redirected folders by using
> folder redirection in Windows 2000 and in Windows Server 2003
> http://support.microsoft.com/kb/274443/
>
> 232692 Folder Redirection Feature in Windows
> http://support.microsoft.com/?id=232692
>
> 288991 Enabling the Administrator to Have Access to Redirected Folders
> http://support.microsoft.com/?id=288991
>
> Hope this helps! If you have any further concern or question about the
> issue, please feel free to let me know. I am looking forward to you!
>
> Have a nice day!
>
> Best Regards,
>
> Jenny Wu
> Microsoft CSS Online Newsgroup Support
> Get Secure! - www.microsoft.com/security
> ======================================================
> This newsgroup only focuses on SBS technical issues. If you have issues
> regarding other Microsoft products, you'd better post in the corresponding
> newsgroups so that they can be resolved in an efficient and timely manner.
> You can locate the newsgroup here:
> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
>
> When opening a new thread via the web interface, we recommend you check
> the
> "Notify me of replies" box to receive e-mail notifications when there are
> any updates in your thread. When responding to posts via your newsreader,
> please "Reply to Group" so that others may learn and benefit from your
> issue.
>
> Microsoft engineers can only focus on one issue per thread. Although we
> provide other information for your reference, we recommend you post
> different incidents in different threads to keep the thread clean. In
> doing
> so, it will ensure your issues are resolved in a timely manner.
>
> For urgent issues, you may want to contact Microsoft CSS directly. Please
> check http://support.microsoft.com for regional support phone numbers.
>
> Any input or comments in this thread are highly appreciated.
> ======================================================
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
> --------------------
>>Thread-Topic: Users access folrders
>>thread-index: AcWgQJyUQtXhC6yYQeKEr1radiuLEQ==
>>X-WBNR-Posting-Host: 67.63.18.98
>>From: "=?Utf-8?B?U0JTMjAwMw==?=" <SBS2003@xxxxxxxxxxxxxxxxxxxxxxxxx>
>>Subject: Users access folrders
>>Date: Sat, 13 Aug 2005 12:53:01 -0700
>>Lines: 7
>>Message-ID: <117193DF-6A5E-424C-8147-92170DF48377@xxxxxxxxxxxxx>
>>MIME-Version: 1.0
>>Content-Type: text/plain;
>> charset="Utf-8"
>>Content-Transfer-Encoding: 7bit
>>X-Newsreader: Microsoft CDO for Windows 2000
>>Content-Class: urn:content-classes:message
>>Importance: normal
>>Priority: normal
>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>>Newsgroups: microsoft.public.windows.server.sbs
>>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
>>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:144022
>>X-Tomcat-NG: microsoft.public.windows.server.sbs
>>
>>I run the wizard to add users... how can I have each user access his own
>>folder for some reasons i can't remove domain users from the share folder
> and
>>if i disable inhiritable permission it looks like i have to add people
>>manualy
>>Is there is a way to when i create a new user the user access only thier
>>user folder all my folder now can be accesed by the other users
>>Thanks
>>
>


.

Relevant Pages

  • Re: Quick Launch sort
    ... Windows 2000 has the best explanations. ... This will reset many things like saved folder settings. ... The changes you make to a folder's view is automatically saved when you close the folder. ... BOOL fShowAllObjects:1; ...
    (microsoft.public.windowsxp.general)
  • Re: Windows Explorer Doesnt Remember Views
    ... menu and to my surprise Explorer remembered the settings again. ... > like saved folder settings. ... > saved in Windows Explorer. ... > BOOL fShowAllObjects:1; ...
    (microsoft.public.windowsxp.general)
  • Re: Remembering window size and position.
    ... I followed all of your instructions to the letter (I have Windows XP ... > like saved folder settings. ... BOOL fShowAllObjects:1; ...
    (microsoft.public.windowsxp.general)
  • Re: Group Policy lock down
    ... to copy the Local Group Policy settings from one computer to another. ... I suspect that using a .bat file would somehow involve having to invoke the ... permissions on the folder. ... The Most Frequently Asked Question About Group Policy in a Workgroup ...
    (microsoft.public.windowsxp.security_admin)
  • Re: 3 long time problems: folder view/tasbar M.I.A./ No Shut Down, seek advice.
    ... Disable everything that reads 'Wake up' in the BIOS settings. ... Win XP Restarts Unexpectedly or Restarts When You Shut Down ... Windows XP Restarts When You Try to Shut Down Your Computer ... Windows remembers 400 folder settings. ...
    (microsoft.public.windowsxp.general)