User Share Permissions NOT WORKING!

Tech-Archive recommends: Speed Up your PC by fixing your registry

I have a SBS 2k3 std server with a working VPN.

I would like to give some customers accounts to have their own e-mail
addresses and a place to dump files for use that only they can access.

The most important issue here is getting files to and from the clients
with no size constraint. I would consider using FTP, but I would like
to use the file transfer method over a VPN since this would also alow
for printing and other shared resources.

Because these are outside people I do not want them to see ANY share on
the server other than the one they have access to.

I tried setting a new security group called "customers" and added it to
each share setting permissions to deny. I also went to each folder and
changed the permission at the folder to deny listing folder contents.

I created a new user using Active Directory Users and computers (not
the SBS tool, but should still work fine). After setting up their
account, I changed two options three items in the account properties.
1) Change logon-to option to say "only selected comptuers" and I left
the list blank (this should stop them from any local login)
2) Changed the remote login policy to allow (from let Routing and
Remote Access determine)
3) Removed the user from the Domain User group and added them to the
customers group.

They are ONLY in the customers group and should now only have access to
the one folder I did not specifically deny the group access to.

I am working remotely, so I logged off my account and reconnected using
the test customer account.

To my supprise, I found that I had COMPLETE access to EVERY network
share.

I logging off and logging on again, I veryified that the settings were
what I described above and applied. Everything seems to be in order,
but the permissions do not follow what is showing for each shared
folder.

I now have to go though every user account to make sure that employees
don't have access to things they shouldn't have access to.

Anybody know whats going on?

.

Relevant Pages

  • Re: User Share Permissions NOT WORKING!
    ... I tried setting a new security group called "customers" and added it to ... changed the permission at the folder to deny listing folder contents. ... account, I changed two options three items in the account properties. ... Remote Access determine) ...
    (microsoft.public.windows.server.sbs)
  • Re: E*Trade: is this is a safe company to do business with?
    ... internal business processes and internal computer systems. ... E*Trade account address information and there is zero tracking at ... have some massive security issues that may lead to its customers being ... Faxes and account locks that can lead to identify theft ...
    (misc.invest.stocks)
  • Re: Cancelling your music account
    ... Hello, I'm Billy Gates, and I have a brief message for all customers of my ... I closed the online music site dude, ... yet another opportunity to access the credit card info you already gave me ... that stated "You Have Now Authorized Us to Use Your Credit Card Account at ...
    (microsoft.public.windowsmedia.player)
  • Re: Help with creating strongly typed DataSet
    ... see their account history, make payments against their balance, etc. ... > I've declared a strongly typed DataSet as a public static object in the ... > Everything works great until two customers log in at roughtly the same ... Because the DataSet object is static, the second customer overwrites ...
    (microsoft.public.dotnet.framework.aspnet)
  • =?iso-8859-1?q?Re:_O/T_-_=A310_a_month_fee_for_First_Direct_customers?=
    ... of free banking in Britain. ... First Direct - a division of HSBC, one of the world's biggest banks ... - plans to impose the charge on customers who have only a current ... time a monthly fee has been proposed for a current account, ...
    (uk.media.tv.misc)