RE: file security
- From: v-branee@xxxxxxxxxxxxxxxxxxxx ("Brandy Nee [MSFT]")
- Date: Mon, 22 Aug 2005 08:03:38 GMT
Hello Li'l Roberto,
Thank you for posting to the SBS Newsgroup.
I am sorry for the delayed response due to weekend. Please understand that
the newsgroups are staffed weekdays by Microsoft Support professionals to
answer your systems and applications questions. Your understanding is
greatly appreciated!
I understand that you set up several clients and one workstation in the SBS
2K3 domain for testing. Each of the clients creates a folder in a Shared
Folder which is mapped to server. Your concern is when clients access to
the Shared folder, they cannot delete other clients' folders. If I have
misunderstood your concern, please let me know.
I understand that you followed the instructions in No. 2152B to configure
the Permissions on the Shared Folder "HomeDrive", in this case, this is an
expected behavior as you have seen. This is because you have granted every
clients Full Control permissions on the Shared Folder "HomeDriver". What
you need to do is manually configure the Shared Folder for every client.
Please see my steps below:
1. Log in server by using Administrator account. Right click the Shared
Folder "HomeDrive", go to Properties, Security tab.
2. In the Group or User Names pool, grant Full Control to Administrators.
Grant Read & Execute, List Folder Contents, Read permissions to Everyone.
Then delete the other Group or User from the Group or User Names pool.
[Note]: If there is no Administrators or Everyone listed in the Group or
User Names pool, please click Add -> Advanced -> Find Now to add these two
accounts in. Then click OK twice.
3. Click Advance, uncheck the box "Allow inheritable permissions from the
parent to propagate¡¡".
4. In the Permission entries pool, highlight the Groups Administrators and
Everyone one by one, click Edit. In the Object tab, the permissions should
be:
Apply onto: This folder, subfolders and files.
Administrators: Full Control.
Everyone: Read & Execute, List Folder Contents, Read.
Note: Do not check any Deny box.
[For your information]: We suggest customer that store their Private
information in My Document Folder rather than storing a shared folder.
Hope this information helps. If anything is unclear, please feel free to
let me know. I am looking forward to your reply!
Best regards,
Brandy Nee
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
>From: "Li'l Roberto" <whoisit@xxxxxxxxxxxxxxxxxx>
>Subject: file security
>Date: Sun, 21 Aug 2005 23:01:34 +0930
>Lines: 28
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2900.2527
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2527
>X-RFC2646: Format=Flowed; Original
>Message-ID: <OJLGmSlpFHA.2904@xxxxxxxxxxxxxxxxxxxx>
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: static-203-87-118-197.sa.chariot.net.au 203.87.118.197
>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!tk2msftngp13.phx.gbl
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:146354
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>I have set up a test domain as a learning tool , it consists of
a
>server running SBS 2003 Standard and one workstation with several
>users, each has a home folder mapped as H: \home drive.
>The folder \\server\HomeDrive is shared and everyone has full
>control, as per the instructions in MS course No:2152B [Implementing
>Windows 2000 and Server].
>
>So basically I need help with setting permissions on users home
>drive files [ \\server\HomeDrive\%username%] , as things are presently
I
>can logon to the domain with any user account , browse the network
in
>Explorer and delete the files in individual users home drive
>folder, not good. What I need is to either make the users home
>folders invisible to other users, or probably better, allow all read
>only access, otherwise in the "real world" chaos would reign I
>think.
>
>Each user is member of:
>Domain Users servername.local /users
>servername servername.local/MyBusiness/Distribution
>Groups
>Remote Web Workplace servername.local/MyBusiness/Security Groups
>
>Robert
>
>
>
>
>
>
.
- References:
- file security
- From: Li'l Roberto
- file security
- Prev by Date: Re: Read only files?
- Next by Date: RE: OWA Calendar not accepting appointments
- Previous by thread: Re: file security
- Next by thread: backup sp1 question
- Index(es):
Relevant Pages
|
