Windows Server 2008 Thread, SYSVOL permissions in Technical; Hi
im running server 2008 at our school. It's the main DC. in the sysvol folder i have a folder ...
19th January 2012, 10:13 AM #1
- Rep Power
im running server 2008 at our school. It's the main DC. in the sysvol folder i have a folder which has shortcuts that are placed on the desktops. Recently 2 folders have been created which are named as 2 users on the domain. The problem is everyone now sees these folders on the desktop. Logged in as administrator on the server I can access the following folder:
\\SERVER\sysvol\alhijrah.pri\Policies\curriculum\D esktop\Folders named as users
When trying to delete the folders named as a user on the domain it says access denied
error code 0x80070005 Access denied.
Ive checked all the permissions for Domain Admin and they are all fine. Really need to get these removed
Any advice is much appreciated.
19th January 2012, 10:21 AM #2
Is there a reason you're using sysvol rather than a shared user drive for this?
You could reset permissions on the top folder, and make sure they cascade down, but the idea of deleting things from SYSVOL is more than a little scary. Might be worth looking into creating a shared user drive instead, and pushing that out when people log on.
19th January 2012, 10:51 AM #3
- Rep Power
All this was already set before i came into the post so i dont want make any drastic changes if its already working. I will check that the permissions are cascading, which im sure they are. What i'd like to know is how did they get there in the first place. My inclination would be that these users who are MIS users thus are local admins also on their machines have access to their desktops. Maybe policy is bot applied correctly.
Originally Posted by jamesb
Let's see how we get on.
19th January 2012, 10:57 AM #4
Just a word of warning: I made some changes to permissions on SYSVOL on a test network and locked out administrator and all other users from the test network [At the time we had XP and I was trying to stop students navigating their way through the folder structure from the Start Menu]
19th January 2012, 10:59 AM #5
Take ownership of the folders by logging onto one of your DCs as a domain admin, or administrator and right click->properties->Security->Advanced->Ownership and ensure you set yourself as owner and propogate the permissions down.
Seems a strange place to put custom folders tbh...
19th January 2012, 11:04 AM #6
As the others have said, it would be best (scrub that, it WILL be best) if you put the shortcuts etc in a regular network share. Sysvol can be a bit like the defualt domain policy in AD. Not something you want to be messing around with at times, especially when it comes to permissions.
19th January 2012, 11:58 AM #7
- Rep Power
Thanks. I agree with you all about placing shortcuts on the share. But doing this mid term will cause alot of problems with staff and pupils. More so with staff as they refuse to listen lol
Originally Posted by Dos_Box
By CHR1S in forum Windows Server 2000/2003
Last Post: 12th March 2010, 09:11 AM
By mac_shinobi in forum Wireless Networks
Last Post: 21st May 2008, 12:36 PM
By jonny_valentine in forum Windows
Last Post: 29th November 2005, 03:39 PM
Last Post: 19th October 2005, 12:21 PM
By woody in forum Windows
Last Post: 2nd August 2005, 11:15 AM
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)