Re: Permissions on a home directory

From: Lanwench [MVP - Exchange] (lanwench_at_heybuddy.donotsendme.unsolicitedmail.atyahoo.com)
Date: 06/03/04 

Date: Thu, 3 Jun 2004 10:24:43 -0400

jonathanr wrote:
> Hi,
>
> We are currently converting our NT4 network to Active Directory
> running 2003 Servers. We are currently running in mixed mode.
>
> The old PDC which was upgraded sets the path for users home
> directories. This was working fine until the server on which the
> users home directories live was rebuilt to 2003 Server. Now the users
> have Read access only on their files. Detailed below are the
> permissions set on the users folder:
>
> When I right click the folder and select properties it shows the Read
> Only box as grey and ticked, I can Untick it and then I am prompted
> "Apply changes to this folder, subfolders and files" I say yes and it
> does some work. It then closes the dialog and when I reopen I find as
> before the Read only box is once again ticked.

The read only box there is irrelevant....not related to your problem.
>
> If I go to the the security tab, there are 2 users reflected, Domain\
> administrator and Domain\username. Both have full control of the
> folder.

Don't give users full control - modify is enough. You don't want them to be
able to change security - just read/write/execute/delete.

> If I click the advanced tab and then owner tab, the
> Domain\username is reflected as the owner. If I go to Effective
> Permissions the user is reflected as having all the permissions
> ticked. However when the user goes into their "U:\" (home) drive they
> can only read the documents in there and not copy, delete etc. for
> example if you try copy a doc the error message which comes up is
> "Cannot copy the XX.doc, Access is denied, the source file may be in
> use"

Share permissions in W2k3 are not set to allow "everyone=full control" as in
previous versions. Grant everyone full control at the SHARE level. Control
the rest via NTFS security.
>
> Can anyone please point to where I have gone wrong in setting up the
> users directories.
>
> Thnaks,
>
> jonathanr

Relevant Pages

  • Re: Domain Users Cant Print to Networked Printer
    ... You might want to just set up a printer server and install it on your clients ... that way so you can control the permissions. ... remove the user from Domain Admins, that user can no longer print. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Need help with setting security permissions for IE hosted dll
    ... How to run a user control assembly hosted on an Internet Information Server ... permissions than would normally be granted to the zone the assembly belongs ...
    (microsoft.public.dotnet.security)
  • Re: win2k / win2k3 adminpak issue
    ... of the parent. ... To control this behavior see ... Microsoft MVP Windows Server - Active Directory ... > with incorrect permissions on the newly created home directory (in my ...
    (microsoft.public.win2000.active_directory)
  • Re: Windows Form Socket Permission
    ... I was stupidly setting the permissions on the server, ... the control is to be ... security object to grant code permssions. ... This means that by default, the enterprise level can only restrict permissions, not grant new ones. ...
    (microsoft.public.dotnet.security)
  • Asp.net Important Topics.
    ... ASP.NET server controls contained within the page. ... A custom server control is ... can also perform validation using client script. ... Where does the Web page belong in the .NET Framework class hierarchy? ...
    (microsoft.public.dotnet.framework.aspnet)
Quantcast