Hi
In my past I do not recall needing to manually set the permissions for user “home” folder so that only the user can read what is inside their folder. We have many folders here that are open to more than they should be.
We create users via ADUC on a domain controller. The user folders are on individual branch servers, all win2003.
What I am looking for is what the Share and Security settings should be on the server “User” share that would prevent users from accessing other user folders if they were to navigate to \\server\users$. It is ok if they view all the user names, but I want them to get denied if they try and open that user folder, unless it is their own of course.
I believe that if we set that at the server level then we would allow inheritance to the child folders. I think that ADUC adds the specific user and gives them full control. I am looking for the setting that would keep out the rest of the users.
Thanks!
Amy