Re: XP User Profile Security Issue

Check the folder/NTFS permissions on the folders in question
[properties/security for NTFS volumes and simple file sharing needs to be
disabled in XP Pro] and remove those users/groups that you do not want to
have access. Typically in a user profile you will see system with full
control, possibly administrators with full control, and the user with full
control. Also make sure that the owner of the folder is the user that you
want to have access or possibly administrators. The owner of a folder/file
can always grant themselves permission even if they do not currently have
any permissions. Avoid using deny permissions if at all possible and instead
plan your access control lists to use an implicit deny where the
users/groups that you do not want to have access have no permissions to the
object.

Steve

http://www.mcmcse.com/microsoft/guides/ntfs_and_share_permissions.shtml ---
brief overview of NTFS/share permisisons
http://support.microsoft.com/kb/304040

"Alan Augustus" <Alan Augustus@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:A5F94029-63A0-43E4-ABA1-5AC6D11CD732@xxxxxxxxxxxxxxxx
We have migrated hundreds of XP desktops from Novell to MS ADS. When it
comes to 3 desktops which share C drive to each other, user B on Computer
B
can access to user A's user profile. Same as user A when he can get
access
to user B 's My Document.

Is there any way to block them access to other user's Document & Settings
while allowing C drive access.

Thanks.


.

Relevant Pages

  • Re: Shared permissions vs. security
    ... system full control as it would have by default. ... write, delete, and change permissions. ... permissions only apply when a use accesses a share via the network. ... Folder/ntfs permissions apply to a local logon or network access. ...
    (microsoft.public.win2000.security)
  • Re: write protected
    ... You need to review the folder/NTFS permissions to give the user/group you ... > In my small home network with 8 computers all running win xp. ... > all the folders on C: and D: drives are write protected, ...
    (microsoft.public.windowsxp.security_admin)
  • Consider Windows XP File Security and Group Policies
    ... If you are running Windows XP and are using the NTFS file system, ... Account from being able to purge its history footprint files. ... Changing Folder permissions to Read-Execute instead of Full ... you globally apply Full Control for the Administrators group and the SYSTEM ...
    (microsoft.public.windowsxp.general)
  • Re: Access denied message even with the Administrator user
    ... I set all to Full Control and still keep getting the Access ... The Share Permissions setting is: ... > This newsgroup only focuses on SBS technical issues. ... you may want to contact Microsoft CSS directly. ...
    (microsoft.public.windows.server.sbs)
  • Re: File Permissions
    ... The default full control for everyone on the root folder is a security issue ... back to default ntfs permissions. ... particularly for the administrator account, ...
    (microsoft.public.win2000.security)