Discussion Locked

home Directories on server 2000

0 helpful
7 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
We were setting up home directories for our users. Once set up everything appeared to work fine. When logged on as user we could access their folder. We could not access others folder (as we knew it should be that way) however we could copy other users folders into the logged on user home directory and access their folders from their. Once we got the permissions down so we couldn't do that, users had only read in their home directory folder. I have checked all permissions and shares right back to the root. What have I missed or is this a flaw?

7 replies

by jamrock

1. Make shure Administrator, Domain Admin, & XXXX (XXXX is the user that should be login to this directory)has full Share rights.

2. The permissions should be the same has the Share.

by baddragon

Also make sure that SYSTEM has full writes, this will permit backups and such like to work.

by timwalsh

How were you able to copy one user's folder into another user's folder, as the administrator or as the logged on user?
If you (as an administrator) copy (or move) a folder into another folder, by default it accepts that folders permissions.
I've set up the following permissions for my user's home directories (which seems to work):

Share permissions assigned to owner (user) only.

NTFS folder and file permissions set to owner and domain admin. Turn off "Allow inheritable permissions from paren to propagate to this object" at the Home folder level.

With these permissions, no one except a user can access his/her home folder through shares. Only the user and the domain admin can access the folder through either a higher level share or directly at the server.

Hope this helps.

This discussion is closed to new replies.