odd problem with home shares

[djdohboy]

I'm having the odd problem with home drive shares on our staff side of the network and was wondering if anyone has come across this or knows of a solution?

The home shares are in the following location: \\servername\users$\%username%

but some people are getting access to \\servername\users$ instead and are seeing the entire directory structure of all staff home drives?????

does anybody know why this is happening? everyone that this happens to ive checked AD and the home drive path is correct and reachable ..... very confusing.

Please tell me where im going wrong and being very stupid. Many thanks in advance

[Michael]

Users should be given Full Control to their home directories. Verify permissions

[CyberNerd]

If users have 'full control' of their permissions they tend to go around doing annoying things like taking ownership and denying backup users read permission. they probably only need read/write/execute permissions.

I wouldn't bother sharing users$, just share the %username%. if admins need access they can get it from the root c/d$

[sidewinder]

^ not a great way of doing it though, having a share for each user
Much easier to just have one!

Also, never had a problem giving full control - as long as you lock it down so that they cant get to change permissions its fine

[tmcd35]

Horses for courses! We use \\server\%user%$ here. But then I have a Pascal prog that I wrote a few years back that bulk imports new users for me, assigning username/passwords/shares/etc so I have very little work to do here. Only thing we need to do is change the security permissions on each new home folder - would've had to do that anyway. \\server\share$\user would actually be no easier or harder for us...

[sidewinder]

Oh, its no easier or harder, I can do it all with scripts and stuff, its just it was always another thing to remember to do - unshare hundreds of student folders before deleting them
I do remember someone else pointing out a disadvantage with seperate shares but no idea what it was now

For your security on home folders, do you use CACLS? Ive got an excel sheet with the command listed, then use concatenate to get the username in from another cell, then just paste the whole lot in a cmd window

[azrael78]

Users should be given Full Control to their home directories. Verify permissions

My personal choice here is to give them Modify permissions, rather than FC.
Simply because it stops them changing or granting permissions to other users (even if they can't see the security tab, they can still use CACLS... and I'm paranoid :P)

Az

[Michael]

I am extremely careful when it comes to permissions and it's only home drives where I give Full Control. I'm still pretty convinced the problem djdohboy has is permissions related.

It would be logical to compare a working user with a non working user step by step. Eventually you'll come across a difference somewhere.

[djdohboy]

The problem is that most of the time it works perfectly fine, but occasionally this happens, this user has been fine for 3 weeks then it happened two times in the space of one morning, and now its back to normal again ..... weird huh!!!

[Jamman960]

I encountered a similar problem when using a script to setup the user folders, it setup everything including the drive letter but the drive either didn't map or got mapped to the root of the share(everything looked fine within the AD).

I re-applied the same home locations using ADModify and they all started working again.