+ Post New Thread
Results 1 to 7 of 7
Windows Server 2008 Thread, SYSVOL permissions in Technical; Hi im running server 2008 at our school. It's the main DC. in the sysvol folder i have a folder ...
  1. #1

    Join Date
    Jun 2011
    Location
    United Kingdom
    Posts
    39
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    SYSVOL permissions

    Hi
    im running server 2008 at our school. It's the main DC. in the sysvol folder i have a folder which has shortcuts that are placed on the desktops. Recently 2 folders have been created which are named as 2 users on the domain. The problem is everyone now sees these folders on the desktop. Logged in as administrator on the server I can access the following folder:

    \\SERVER\sysvol\alhijrah.pri\Policies\curriculum\D esktop\Folders named as users

    When trying to delete the folders named as a user on the domain it says access denied

    error code 0x80070005 Access denied.

    Ive checked all the permissions for Domain Admin and they are all fine. Really need to get these removed

    Any advice is much appreciated.

  2. #2

    Join Date
    Mar 2008
    Location
    Surrey
    Posts
    2,168
    Thank Post
    98
    Thanked 319 Times in 261 Posts
    Blog Entries
    4
    Rep Power
    113
    Is there a reason you're using sysvol rather than a shared user drive for this?

    You could reset permissions on the top folder, and make sure they cascade down, but the idea of deleting things from SYSVOL is more than a little scary. Might be worth looking into creating a shared user drive instead, and pushing that out when people log on.

  3. #3

    Join Date
    Jun 2011
    Location
    United Kingdom
    Posts
    39
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Quote Originally Posted by jamesb View Post
    Is there a reason you're using sysvol rather than a shared user drive for this?

    You could reset permissions on the top folder, and make sure they cascade down, but the idea of deleting things from SYSVOL is more than a little scary. Might be worth looking into creating a shared user drive instead, and pushing that out when people log on.
    All this was already set before i came into the post so i dont want make any drastic changes if its already working. I will check that the permissions are cascading, which im sure they are. What i'd like to know is how did they get there in the first place. My inclination would be that these users who are MIS users thus are local admins also on their machines have access to their desktops. Maybe policy is bot applied correctly.

    Let's see how we get on.

  4. #4

    DaveP's Avatar
    Join Date
    Oct 2006
    Location
    Can't talk now: The mother-ship is calling!
    Posts
    8,909
    Thank Post
    351
    Thanked 1,291 Times in 882 Posts
    Blog Entries
    4
    Rep Power
    1129
    Just a word of warning: I made some changes to permissions on SYSVOL on a test network and locked out administrator and all other users from the test network [At the time we had XP and I was trying to stop students navigating their way through the folder structure from the Start Menu]

  5. #5
    Jamo's Avatar
    Join Date
    Jan 2009
    Posts
    1,350
    Thank Post
    66
    Thanked 175 Times in 147 Posts
    Rep Power
    60
    Take ownership of the folders by logging onto one of your DCs as a domain admin, or administrator and right click->properties->Security->Advanced->Ownership and ensure you set yourself as owner and propogate the permissions down.

    Seems a strange place to put custom folders tbh...

  6. #6

    Dos_Box's Avatar
    Join Date
    Jun 2005
    Location
    Preston, Lancashire
    Posts
    10,400
    Thank Post
    602
    Thanked 2,171 Times in 994 Posts
    Blog Entries
    23
    Rep Power
    630
    As the others have said, it would be best (scrub that, it WILL be best) if you put the shortcuts etc in a regular network share. Sysvol can be a bit like the defualt domain policy in AD. Not something you want to be messing around with at times, especially when it comes to permissions.

  7. #7

    Join Date
    Jun 2011
    Location
    United Kingdom
    Posts
    39
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Quote Originally Posted by Dos_Box View Post
    As the others have said, it would be best (scrub that, it WILL be best) if you put the shortcuts etc in a regular network share. Sysvol can be a bit like the defualt domain policy in AD. Not something you want to be messing around with at times, especially when it comes to permissions.
    Thanks. I agree with you all about placing shortcuts on the share. But doing this mid term will cause alot of problems with staff and pupils. More so with staff as they refuse to listen lol

SHARE:
+ Post New Thread

Similar Threads

  1. Lost my permission to edit scripts in SYSVOL
    By CHR1S in forum Windows Server 2000/2003
    Replies: 3
    Last Post: 12th March 2010, 09:11 AM
  2. Transfer User Area's - Permissions Issues ??
    By mac_shinobi in forum Wireless Networks
    Replies: 24
    Last Post: 21st May 2008, 12:36 PM
  3. Security Permissions Missing
    By jonny_valentine in forum Windows
    Replies: 11
    Last Post: 29th November 2005, 03:39 PM
  4. Permissions not working
    By mark in forum Windows
    Replies: 5
    Last Post: 19th October 2005, 12:21 PM
  5. Keep them permissions!
    By woody in forum Windows
    Replies: 5
    Last Post: 2nd August 2005, 11:15 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •