Re: User Share Permissions NOT WORKING!

try creating the uses via the sbs add new user wizard then adjust the group
that they are members of then log in remotely and see what happens.

<trump26901@xxxxxxxxx> wrote in message
news:1149374045.635266.245940@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
I have a SBS 2k3 std server with a working VPN.

I would like to give some customers accounts to have their own e-mail
addresses and a place to dump files for use that only they can access.

The most important issue here is getting files to and from the clients
with no size constraint. I would consider using FTP, but I would like
to use the file transfer method over a VPN since this would also alow
for printing and other shared resources.

Because these are outside people I do not want them to see ANY share on
the server other than the one they have access to.

I tried setting a new security group called "customers" and added it to
each share setting permissions to deny. I also went to each folder and
changed the permission at the folder to deny listing folder contents.

I created a new user using Active Directory Users and computers (not
the SBS tool, but should still work fine). After setting up their
account, I changed two options three items in the account properties.
1) Change logon-to option to say "only selected comptuers" and I left
the list blank (this should stop them from any local login)
2) Changed the remote login policy to allow (from let Routing and
Remote Access determine)
3) Removed the user from the Domain User group and added them to the
customers group.

They are ONLY in the customers group and should now only have access to
the one folder I did not specifically deny the group access to.

I am working remotely, so I logged off my account and reconnected using
the test customer account.

To my supprise, I found that I had COMPLETE access to EVERY network
share.

I logging off and logging on again, I veryified that the settings were
what I described above and applied. Everything seems to be in order,
but the permissions do not follow what is showing for each shared
folder.

I now have to go though every user account to make sure that employees
don't have access to things they shouldn't have access to.

Anybody know whats going on?



.

Relevant Pages

  • Re: IIS 6.0 with Mapped Drives
    ... The user account that IIS is impersonating needs to have permissions to ... permissions to the remote resource. ... folder on local drive on the server, this local folder is Virtual Directory ...
    (microsoft.public.inetserver.iis)
  • RE: Failed to start monitoring changes to
    ... Since the sub web folder is point to a remote shared ... since the default process account is a local account, ... remote mahcine no matter the remote folder has been grant "Full Control" ... local and remote machine and have same username and passworld). ...
    (microsoft.public.dotnet.framework.aspnet)
  • User Share Permissions NOT WORKING!
    ... I have a SBS 2k3 std server with a working VPN. ... I tried setting a new security group called "customers" and added it to ... changed the permission at the folder to deny listing folder contents. ... account, I changed two options three items in the account properties. ...
    (microsoft.public.windows.server.sbs)
  • Re: Conttact folder loop - freeze
    ... The loop is exactly what i do. ... Is there a way to know if a folder is local or remote? ... other account it freezed Outlook opertion because it tried ... > A remote connection will be slow, not much you can do about that. ...
    (microsoft.public.office.developer.outlook.forms)
  • Re: Folder contents are different when logged in remotely?
    ... Documents" folder. ... The client is the MD of the company that owns the server and he is ... connecting using a secure hardware VPN as do I as his remote IT ... your remote PC is seeing the cached offline files, which are outdated, ...
    (microsoft.public.windows.server.sbs)