+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 20
Windows Thread, How do you do user shares? in Technical; Basic question, do you have one share for each user (as we do currently), or one share per staff type/year ...
  1. #1

    Join Date
    Jul 2006
    Location
    London
    Posts
    2,962
    Thank Post
    160
    Thanked 152 Times in 116 Posts
    Rep Power
    49

    How do you do user shares?

    Basic question, do you have one share for each user (as we do currently), or one share per staff type/year group etc and then map to a subdirectory of the share?

    And does it make any difference?

    Im thinking of going the single share way due to the fact its a hassle to remember to unshare folders if they're going to be moved to another location or deleted

  2. #2
    ajbritton's Avatar
    Join Date
    Jul 2005
    Location
    Wandsworth
    Posts
    1,632
    Thank Post
    23
    Thanked 75 Times in 45 Posts
    Rep Power
    34

    Re: How do you do user shares?

    I have one share for all staff and one for all students.. unless I have to cope with any Win9X/ME PCs. The only problem I've noticed is that Office (might be certain versions only, I have not checked) likes to have explicit traverse access to the folders above the user folder but below the share. So if D:\User\Staff was shared as 'staff' and subfolders were individual user folders, then you would need to make sure 'Authenticated Users' have 'traverse' rights on D:\User\Staff (this folder only).

  3. #3
    mark's Avatar
    Join Date
    Jun 2005
    Posts
    3,983
    Thank Post
    268
    Thanked 52 Times in 46 Posts
    Blog Entries
    2
    Rep Power
    47

    Re: How do you do user shares?

    One share - hidden - on curriculum server fo kids, another set up the same for staff on a child domain.

    The advantage is like ajb says - users have no rights to browse the underlying share if you share their home folders explicitly - tho' they shouldn't be able to access any folders anyway.

  4. #4

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,580
    Thank Post
    723
    Thanked 1,684 Times in 1,499 Posts
    Rep Power
    432

    Re: How do you do user shares?

    I use one share per user.

    i.e \\server\username$

    Ben

  5. #5
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    4,993
    Thank Post
    120
    Thanked 286 Times in 263 Posts
    Rep Power
    107

    Re: How do you do user shares?

    With a Server 2003 system you can enable access based enumeration if you download the tool from MS to enable it. This will mean that users cant see folders they dont have permission to access so it doesnt matter if they manage to go up a lovel from their folder etc.

  6. #6

    Ric_'s Avatar
    Join Date
    Jun 2005
    Location
    London
    Posts
    7,592
    Thank Post
    109
    Thanked 770 Times in 598 Posts
    Rep Power
    183

    Re: How do you do user shares?

    I use the same method as AJ... in my case though, my files reside on a SAN with a virtual drive for Y7 to y11 connected to one server and a second server with staff and y12 to y13 (2 virtual drives). This way some of the load is shared when serving files.

  7. #7
    ajbritton's Avatar
    Join Date
    Jul 2005
    Location
    Wandsworth
    Posts
    1,632
    Thank Post
    23
    Thanked 75 Times in 45 Posts
    Rep Power
    34

    Re: How do you do user shares?

    Quote Originally Posted by ChrisH
    With a Server 2003 system you can enable access based enumeration if you download the tool from MS to enable it. This will mean that users cant see folders they dont have permission to access so it doesnt matter if they manage to go up a lovel from their folder etc.
    I think that's 'sot of nice', but probably more confusing than anything else. When you get a support call from a user unable to access a file/folder and they are getting 'access denied', then you know what you need to do. If you get a support call from someone saying 'I can't find....', then first of all you have to establish that they are in the right place and only then do you twig that it's a permissions issue.

    Any examples of when this feature would actually benefit anyone? (bearing in mind that if all you want to do is hide a folder, it needs to be a sub-folder of a folder that those you wish to hide it from cannot read).

  8. #8
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    4,993
    Thank Post
    120
    Thanked 286 Times in 263 Posts
    Rep Power
    107

    Re: How do you do user shares?

    Its good for the example you gave in your previous post of home folders. It isnt a universal setting and can be set per volume maybe even more granular now but I can remember without looking it up.

  9. #9

    Ric_'s Avatar
    Join Date
    Jun 2005
    Location
    London
    Posts
    7,592
    Thank Post
    109
    Thanked 770 Times in 598 Posts
    Rep Power
    183

    Re: How do you do user shares?

    Quote Originally Posted by ChrisH
    ... but I can remember without looking it up.
    Perhaps in the Mark Minasi book that I am now denied access to

  10. #10

    Join Date
    Jul 2006
    Location
    London
    Posts
    2,962
    Thank Post
    160
    Thanked 152 Times in 116 Posts
    Rep Power
    49

    Re: How do you do user shares?

    Quote Originally Posted by ChrisH
    With a Server 2003 system you can enable access based enumeration if you download the tool from MS to enable it. This will mean that users cant see folders they dont have permission to access so it doesnt matter if they manage to go up a lovel from their folder etc.
    I was actually thinking of trying this as I was reading my R2 book earlier

    Thought I could possibly map everyone to the same share but they'd only see their own folder

    I think ABE is quite useful in that respect, but I wouldnt use it for the common area or anything or it will lead to calls like aj describes

    AJ - You talk about having to set traverse rights - surely this could lead to problems as users would be able to navigate up to the root of the share and see everyones folders?

  11. #11

    Ric_'s Avatar
    Join Date
    Jun 2005
    Location
    London
    Posts
    7,592
    Thank Post
    109
    Thanked 770 Times in 598 Posts
    Rep Power
    183

    Re: How do you do user shares?

    Quote Originally Posted by sidewinder
    AJ - You talk about having to set traverse rights - surely this could lead to problems as users would be able to navigate up to the root of the share and see everyones folders?
    Surely seeing and being able to do anything with the folders are two entirely different things

  12. #12

    Join Date
    Jul 2006
    Location
    London
    Posts
    2,962
    Thank Post
    160
    Thanked 152 Times in 116 Posts
    Rep Power
    49

    Re: How do you do user shares?

    Quote Originally Posted by Ric_
    Quote Originally Posted by sidewinder
    AJ - You talk about having to set traverse rights - surely this could lead to problems as users would be able to navigate up to the root of the share and see everyones folders?
    Surely seeing and being able to do anything with the folders are two entirely different things
    Of course
    They cant do anything with them but ideally Id still prefer they couldnt see them
    I suppose though that would be where Id use access based enumeration

  13. #13

    Join Date
    Nov 2006
    Location
    Milan, Italy
    Posts
    38
    Thank Post
    0
    Thanked 3 Times in 3 Posts
    Rep Power
    17

    Re: How do you do user shares?

    I have a slightly modified approach.

    My Home folder structure mirrors my AD structure.
    So in AD its like this:

    Students
    ->2005
    ->2006
    ->2007

    Each year (OU) based on the students graduation year. Their user areas are the same:

    \\server\Students$\2005\firstinitiallastname

    So each student gets there own user area which is directly mapped to u: So students never even see another students user area.

    This structure makes it easy so that at the end of the year I just delete the OU and the year folder containing the individual student folders. Easy cleanup.

    I have some kids who leave before graduating but thats easy to take care of by hand or with a script.

  14. #14
    thom's Avatar
    Join Date
    Jul 2005
    Location
    Bedford, East Anglia, UK
    Posts
    242
    Thank Post
    4
    Thanked 6 Times in 5 Posts
    Rep Power
    20

    Re: How do you do user shares?

    I also use the approach of mirroring my AD structure.
    It keeps it simple for managing the access as it is all laid out the same.
    I don't map drives though. I use folder redirection in group policy to create a user folder in the appropriate share.
    For example, i have a server \\0Files with one share on it called \Home
    In group policy i set it up like so...
    if user is in STAFF group link "my documents" to \\0Files\Home\Staff\%USERNAME%\My Documents
    If user is in the 2002 INTAKE group link "my documents" to \\0Files\Home\Students\2002Intake\%USERNAME%\My Documents.

    The bonus of doing it this way is that it creates the folder with the correct permissions the first time a user logs in.
    It was a bit buggy in 2000 but seems to work great with 2003 and XP.

  15. #15
    k-strider's Avatar
    Join Date
    Oct 2006
    Location
    Gloucester
    Posts
    358
    Thank Post
    7
    Thanked 40 Times in 30 Posts
    Rep Power
    24

    Re: How do you do user shares?

    Doesn't having one share per user put a lot of extra work on the server? and a lot of work on you if you start moving things around...

    it used to be like that when i came and it was NT4...

    now everything is mapped through the DFS name space so i can move things around the servers without people noticing..

    so for example
    Students:
    \\dfsnamespace\dfssharename\home\Yearofstudent\%us ername%
    and say staff are:
    \\dfsnamespace\dfssharename\home\staff\%username%
    and no teaching:
    \\dfsnamespace\dfssharename\officestaff\%username%

    And the non teaching staff are on a different server to the students and staff

    We do folder redirection using the DFS name space too.

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. User shares on mass
    By edie209 in forum Windows
    Replies: 4
    Last Post: 5th November 2007, 02:50 PM
  2. Non-domain Laptops accessing user home shares.
    By RockIt in forum How do you do....it?
    Replies: 3
    Last Post: 30th August 2007, 10:37 PM
  3. Replies: 4
    Last Post: 12th December 2006, 05:33 PM
  4. User Areas - Shares!?!
    By wesleyw in forum How do you do....it?
    Replies: 7
    Last Post: 23rd August 2006, 01:07 PM
  5. stocks and shares
    By russdev in forum Other Stuff
    Replies: 0
    Last Post: 25th August 2005, 05:25 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •