Re: Users Shared Folders Permission and Locking Down

Hi Mike,

What did you use for share and security permissions for those groups? Here are the default settings which may help you answer your own question by giving a different angle to it for you.

The permission for the Users Shared Folder

NTFS:
Domain Admins Full Control
Domain Users Special - Allow: Traverse Folder/Execute Files, List Folder/Read Data, Read Attributes, Read Extended Attributes, Create Folders/Append Data, Read Permissions
System Full Control
SBS Folder Operators Full Control

Sharing:
Domain Admins, Domain Users, SBS Folder Operators: Full Control

Individual Users Folder.
NTFS:
Domain Admin Full Control (Inherited)
System Full Control (Inherited)
SBS Folder Operators Full Control (Inherited)
Individual user Full Control (Not Inherited)


Hope that helps you out,
Steve

Steven Banks, MCP, CSSA [SBS MVP]
Microsoft Small Business Specialist
Banks Consulting Northwest Inc.
http://www.banksnw.com
http://msmvps.com/blogs/steveb/

Co-Author, Advanced Windows Small Business Server 2003 Best Practices


"Mike Johnson" <MikeJohnson@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:5861C67B-772E-4947-8445-14282C9461D4@xxxxxxxxxxxxxxxx
Question? I have an SBS 2003 enviroment that needs to be locked down some.
For example, the owner doesn't want certain people to access his Users Shared
Folders but he wants a select few to be able to gain access. I was thinking
of using a few security groups, and when I did, the people that need access
have read only access. Were did I go wrong. Is there a document on securing
these specific folders? Any help would be greatly appreciated.

Thanks in advance.

Sincerely,

Mike Johnson

.

Relevant Pages