+ Post New Thread
Results 1 to 5 of 5
Windows Server 2000/2003 Thread, Sharing or Security Problem - Possibly? in Technical; ...
  1. #1

    Join Date
    Mar 2009
    Location
    Bedford
    Posts
    31
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Sharing or Security Problem - Possibly?

    To all


    In the past the school have set up the home folders in the follow was


    Year Group (09Intake)
    then
    Individual Folders for each student (10xxusernamexx)

    Year Group Share is set as:

    Year Group = Change + Read
    Every One = Full
    Admin = Full

    Year Group Security is set as

    Year Group = M,R&E,L,R & W
    Staff (Teachers) = R&E,L,R & W
    Admin = Full

    Unfortunately since we bought some new higher spec we have a problem – In a number of cases a pupil does not get the correct home instead will see all folders in the group!

    It seems that the only solve the problem is to set level at the individual folder with Full option.

    Two questions

    1. Does any have a easy batch/vbs script to run against the existing folders.

    2. Why the problem – I was working now it does not.

    Andrew

  2. #2
    sister_annex's Avatar
    Join Date
    Jan 2009
    Location
    Wolverhampton
    Posts
    594
    Thank Post
    100
    Thanked 136 Times in 120 Posts
    Rep Power
    49
    Quote Originally Posted by ahankiewicz View Post
    Year Group Share is set as:

    Year Group = Change + Read
    Every One = Full
    Admin = Full
    Firstly, giving everyone FULL negates the need for the other entries on your Year Group Share

    I am presuming this is for a Home Directory, if so how are the paths arranged in your AD structure. Something like \\server\yeargroup\userfolder ??

    if so there is a group policy to alter how shares/ drive letters are mapped - in the user profiles section of Group Policy you want the setting for Mapping Shares to the Root

    If I am barking up the wrong tree then I do apologise but this is the firt thing i could think about

    HTH

    Mark

  3. #3

    Join Date
    Mar 2009
    Location
    Bedford
    Posts
    31
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Quote Originally Posted by sister_annex View Post
    Firstly, giving everyone FULL negates the need for the other entries on your Year Group Share

    OK

    I am presuming this is for a Home Directory, if so how are the paths arranged in your AD structure. Something like \\server\yeargroup\userfolder ??

    Home Folder Connect H: To \\server\usergroup\username

    I have had to change to Connect H: To \\server\username
    with the username is now shared -Everyone -Full

    if so there is a group policy to alter how shares/ drive letters are mapped - in the user profiles section of Group Policy you want the setting for Mapping Shares to the Root


    If I am barking up the wrong tree then I do apologise but this is the firt thing i could think about

    HTH

    Mark
    Does this help?

  4. #4
    sister_annex's Avatar
    Join Date
    Jan 2009
    Location
    Wolverhampton
    Posts
    594
    Thank Post
    100
    Thanked 136 Times in 120 Posts
    Rep Power
    49
    so \\server\username is the share or \\server\group\username?

    as you had full for everyone on the group share anyway the other perms wouldn't have been used just looks tidier and easier to manage

    here we do this

    our user paths are \\server\users$\intake<year>\username

    only users$ has share permissions allowing 1 point of entry with Everyone FC (less overhaed for the OS also)

    the username folder has NTFS permissions for staff (modify) relevant user(modify) and admins (FC)

    this maps to a H:\ Drive using AD

    in group policy then we had to set the entry that states that shares should be mapped to the root folder to disabled - this should then allow subfolders as drive letters.

    sharing the username with everyone full is ok as long as your NTFS permissions have been setup correctly otherwise it can be a big security hole

  5. #5

    Join Date
    Mar 2009
    Location
    Bedford
    Posts
    31
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Thank you - Now I have to think it through again!!

    Thanks again

    Andrew

SHARE:
+ Post New Thread

Similar Threads

  1. Exchange calendar sharing problem
    By Jambo_C in forum How do you do....it?
    Replies: 1
    Last Post: 19th November 2009, 12:58 PM
  2. Redirection Problem (possibly)
    By ahankiewicz in forum Wireless Networks
    Replies: 2
    Last Post: 3rd June 2009, 01:50 PM
  3. MS access 2003 security problem
    By rhyds in forum Windows
    Replies: 5
    Last Post: 16th January 2008, 04:26 PM
  4. Redirected My Documents security problem
    By netadmin in forum Windows
    Replies: 3
    Last Post: 22nd May 2007, 09:14 PM
  5. Problem Sharing Epson Stylus D68
    By PsychoTech83 in forum Hardware
    Replies: 3
    Last Post: 7th June 2006, 11:52 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •