Map network drive question

The security attribute that would prevent the user from seeing the contents of the folders would be the "List Folder Contents"; you would want to remove all other permissions and set the "list" permission to "Deny." However, you can't do this at the folder level itself. In other words, they would still be able to see the folder but they would not be able to open it or view the contents of the folder. I don't know of any way to actually hide the folder itself.

If the users are grouped in such a way that you can identify different groups of users who all need the same subset of folders, I would say that a better alternative would be to move the folders into separate shares by group and then map the drive letter depending upon which group the user belongs to. This can be accomplished by using the "ifmember.exe" resource kit utility; this utility allows you to check group membership from a login script and then set the script to perform drive mapping(s) only if the user is a member of the particular group.

If this solution will work for you, and you need help with the scripting, I can email you directly an example of a script I use to do this sort of thing.

Hope this helps!

OK, I've kind of stumbled across a solution but need help actually implementing it (still fairly new to this game).

If a user only needs to see their own folder in the U: drive (users' folder) then I could enable sharing on that individual user folder and in the logon script (which everyone has) map directly to it - and hopefully, hey presto a users U:\ will only show the contents of their folder.

Like I said, I understand the principle but actually dealing with logon scripts is new to me and need to know exactly what I'd have to do. Can anybody help?

Cheers

For this simple mapping you don't need a script. Under Active Directory Users and Computers open the user account. Click on the PROFILE tab, under Home folder click the CONNECT radial button, select U: and type in the path for the user's folder.

Good Luck

if the client is running 2000 or xp, you can map the drive directly to the folder that you want, \\severname\sharename\users_folder. You are able to specify fairly deep. If the clients are not running 2000 or xp, you'll have to lock the other folders down by permissions.

I am going to combine the last two correct answers with some clarity:

Lets say you have a folder called users and shared as users. Under that you have each users folder named as their user name. It would look like:

USERS
-----> b_smith
-----> j_jones

In the users properties on the profile tab select home folder and map U: to \\servername\users\%username%

Start by having the users folder with admins and creator owner with full permissions. Then when you set the profile tab up it will creat the user folder and set the user as owner with full access. The admin will have full access without having to take ownership.

Good Luck,

razz

If using a batch file to create this for all users, share the top level folder (lets call it docs0 and place all user folders beneath this and then use the following to map each user to their respective folder

\\servername\docs\%username%