+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 20
Windows Thread, Home Folder Shares in Technical; In the process of creating new AD structure for next year, and reviewing the home folder structure we have at ...
  1. #1

    Gatt's Avatar
    Join Date
    Jan 2006
    Posts
    6,674
    Thank Post
    861
    Thanked 650 Times in 431 Posts
    Rep Power
    499

    Home Folder Shares

    In the process of creating new AD structure for next year, and reviewing the home folder structure we have at present

    currently it is \\file-server\pupils\year xx\%username%
    where pupils is the share name

    But this is causing some problems with permissions (some kids have found they can hit this directory and view its contents)

    Is it possible to stop them viewing the contents of pupils and also the year xx folders, but still have the appropriate rights to their own folder?

    Or would it be easier to share their actual home folder itself?

  2. #2


    Join Date
    Dec 2005
    Location
    In the server room, with the lead pipe.
    Posts
    4,649
    Thank Post
    275
    Thanked 780 Times in 607 Posts
    Rep Power
    224

    Re: Home Folder Shares

    We do it as \\server\users\year\username$, where username$ is the share name.

    The blind share can lead to issues with scripting if you don't escape the "$" properly, but apart from that - not a problem.

  3. #3

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,679
    Thank Post
    661
    Thanked 1,626 Times in 1,455 Posts
    Rep Power
    422

    Re: Home Folder Shares

    We share the users actual folder as well as a hidden share.

    Prevents the problems you've seen I have

    users\students\00\%username%$

    I also share the 00 folder so that staff can have a shortcut to it to navigate down to a students home folder.

    Ben

  4. #4
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    5,013
    Thank Post
    120
    Thanked 282 Times in 260 Posts
    Rep Power
    108

    Re: Home Folder Shares

    Putting a "$" on the root share seems to sort this problem for me. The only permissions they have are for their own folders so if they tried \\fileserver\pupil$ they would get access denied.

  5. #5

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,804
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: Home Folder Shares

    Quote Originally Posted by ChrisH
    Putting a "$" on the root share seems to sort this problem for me. The only permissions they have are for their own folders so if they tried \\fileserver\pupil$ they would get access denied.
    This is the best solution. IIRC it's even the recommended method as per the MS documentation/courses.

    As an aside, it also makes using pam_mount dead easy on Linux if you want to use Linux desktops and keep the file areas seamless.

  6. #6
    Guest

    Re: Home Folder Shares

    Yep same here.

    \\Servername\users$ root share

    \\Servername\username$ users home folder

  7. #7

    Gatt's Avatar
    Join Date
    Jan 2006
    Posts
    6,674
    Thank Post
    861
    Thanked 650 Times in 431 Posts
    Rep Power
    499

    Re: Home Folder Shares

    Cheers folks, that's pretty much how im gonna go now

  8. #8

    Ric_'s Avatar
    Join Date
    Jun 2005
    Location
    London
    Posts
    7,600
    Thank Post
    109
    Thanked 769 Times in 598 Posts
    Rep Power
    181

    Re: Home Folder Shares

    @Gatt: I use the same folder structure. I have a script that you can run over the same folders and it will sort the permissions and ownership. If they do browse the share, they can only see a list of folders and they cannot get into them.

    If you want the script, PM me next week - I will definately forget about it by Tuesday!

  9. #9
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    5,013
    Thank Post
    120
    Thanked 282 Times in 260 Posts
    Rep Power
    108

    Re: Home Folder Shares

    If forgot about this as well which I posted a while back.

    http://edugeek.net/index.php?name=Do...details&lid=16

  10. #10

    Join Date
    Jan 2006
    Location
    Surburbia
    Posts
    2,178
    Thank Post
    74
    Thanked 307 Times in 243 Posts
    Rep Power
    115

    Re: Home Folder Shares

    Doesn't really matter if your NTFS permission are right, but I don't really see much point in making share hidden when their names are predictable.

  11. #11

    Ric_'s Avatar
    Join Date
    Jun 2005
    Location
    London
    Posts
    7,600
    Thank Post
    109
    Thanked 769 Times in 598 Posts
    Rep Power
    181

    Re: Home Folder Shares

    @PiqueABoo: Hence the script that I use

  12. #12

    Join Date
    Mar 2006
    Posts
    537
    Thank Post
    2
    Thanked 3 Times in 2 Posts
    Rep Power
    19

    Re: Home Folder Shares

    Quote Originally Posted by PiqueABoo
    Doesn't really matter if your NTFS permission are right, but I don't really see much point in making share hidden when their names are predictable.
    and *nix browsers (MacOS X and Linux) ignore the $ anway .

    Does having a share per folder have performance hit?

  13. #13

    Join Date
    Sep 2005
    Posts
    143
    Thank Post
    0
    Thanked 3 Times in 3 Posts
    Rep Power
    19

    Re: Home Folder Shares

    I set ours up like this for last years 'year 7':

    \\server\users\2005intake\%username%

    Users shares permissions are: everyone full access
    Users folder permissions are: domain admins full access only
    2005intake folder permissions: domain admins full access only
    %username% is autocreated when you make the account, giving the user full access and permissions filterting down from users\intake to give domain admins full access.

    This stops them snooping around your user folders and also stops them saving random files to the users\intake folder instead of their homedir.

  14. #14
    Quackers's Avatar
    Join Date
    Jan 2006
    Posts
    1,347
    Thank Post
    40
    Thanked 145 Times in 120 Posts
    Rep Power
    54

    Re: Home Folder Shares

    Quote Originally Posted by Frazer
    I set ours up like this for last years 'year 7':

    \\server\users\2005intake\%username%

    Users shares permissions are: everyone full access
    Users folder permissions are: domain admins full access only
    2005intake folder permissions: domain admins full access only
    %username% is autocreated when you make the account, giving the user full access and permissions filterting down from users\intake to give domain admins full access.

    This stops them snooping around your user folders and also stops them saving random files to the users\intake folder instead of their homedir.
    Thats how i do my Home Directorys, i do not see the point in having a share for each user. Its very clean and quick doing this way.

  15. #15

    Gatt's Avatar
    Join Date
    Jan 2006
    Posts
    6,674
    Thank Post
    861
    Thanked 650 Times in 431 Posts
    Rep Power
    499

    Re: Home Folder Shares

    Quote Originally Posted by Quackers
    Quote Originally Posted by Frazer
    I set ours up like this for last years 'year 7':

    \\server\users\2005intake\%username%

    Users shares permissions are: everyone full access
    Users folder permissions are: domain admins full access only
    2005intake folder permissions: domain admins full access only
    %username% is autocreated when you make the account, giving the user full access and permissions filterting down from users\intake to give domain admins full access.

    This stops them snooping around your user folders and also stops them saving random files to the users\intake folder instead of their homedir.
    Thats how i do my Home Directorys, i do not see the point in having a share for each user. Its very clean and quick doing this way.
    Think i'll give this a go as my File Server is overworked as it is - last thing i need is 1200+ shares running off it

    just need to setup LimitLogon too so the little darlings cant log in multiple times

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Students are installing IM apps to their home folder
    By bwallman in forum How do you do....it?
    Replies: 30
    Last Post: 20th December 2007, 05:31 PM
  2. Mass Home Folder Creation?
    By Blind in forum Windows
    Replies: 11
    Last Post: 1st September 2007, 08:05 PM
  3. Non-domain Laptops accessing user home shares.
    By RockIt in forum How do you do....it?
    Replies: 3
    Last Post: 30th August 2007, 10:37 PM
  4. Replies: 2
    Last Post: 1st August 2007, 10:59 AM
  5. delete same folder from all users home area
    By markcuk in forum How do you do....it?
    Replies: 27
    Last Post: 25th April 2007, 10:38 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •