+ Post New Thread
Results 1 to 7 of 7
Windows Thread, Permissions on Student Home folders in Technical; Quick quetion. Student H:\ drives (home shares) are held on a 2003 R2 Server. When I set up new students ...
  1. #1
    kennysarmy's Avatar
    Join Date
    Oct 2005
    Location
    UK
    Posts
    1,286
    Thank Post
    80
    Thanked 45 Times in 31 Posts
    Rep Power
    30

    Permissions on Student Home folders

    Quick quetion.

    Student H:\ drives (home shares) are held on a 2003 R2 Server.

    When I set up new students I go in to the new folder properties and then Sharing tab:

    in "Permissions" I edit this to EVERYONE : full control

    On the Security tab I edit so it says:

    Administrators : Full Control
    Creator Owner : Full Control
    Domain Admins : Full Control
    Staff : Read & Execute, List Folder Contents & Read
    *specific user * : Modify

    Will this cause any problems with the user not having Full Control?

    What does everyone else do?

    Cheers

  2. #2
    jsnetman's Avatar
    Join Date
    Oct 2007
    Posts
    887
    Thank Post
    23
    Thanked 134 Times in 126 Posts
    Rep Power
    39
    The "specific user" entry looks wrong to me. It will be surpassed by the creator owner as the user will then be given full control as the owner. I may be misunderstanding your question though, is the specific user the actual user assigned that home folder, if not then it looks right.

  3. #3

    Join Date
    Nov 2011
    Posts
    33
    Thank Post
    0
    Thanked 3 Times in 3 Posts
    Rep Power
    7
    I've always been told, and follow that users should never have full control on their own folders, if only to prevent new files/folders being created which the Administrator is not the owner of.... so from my knowledge, everything is fine in your setup... (let me know if you get issues)

  4. #4

    DaveP's Avatar
    Join Date
    Oct 2006
    Location
    Can't talk now: The mother-ship is calling!
    Posts
    8,709
    Thank Post
    351
    Thanked 1,268 Times in 866 Posts
    Blog Entries
    4
    Rep Power
    1124
    When creating our users we use AD to setup the Home Folder. We point AD at the location and then the folder is created automatically.

    The permissions created this way are for the Specific User, Full Control.

  5. #5
    kennysarmy's Avatar
    Join Date
    Oct 2005
    Location
    UK
    Posts
    1,286
    Thank Post
    80
    Thanked 45 Times in 31 Posts
    Rep Power
    30
    I've always done modify and don't think we've had any issues to date.....

  6. #6

    Join Date
    May 2009
    Posts
    28
    Thank Post
    0
    Thanked 2 Times in 2 Posts
    Rep Power
    11
    best practice is to set profile folders as Full Control with the user also being set as the owner.
    Userfiles folders should be set to Modify with the user also being set as the owner.

    Active Directory attempts to make userfile folders full control when allowing the ADUC to create the folder but this is not recommended. I can't find it right now, but I swear I remember reading something from Microsoft that said userfiles should not be full control, only modify.

  7. #7

    Join Date
    Apr 2011
    Posts
    67
    Thank Post
    14
    Thanked 7 Times in 7 Posts
    Rep Power
    8
    Set the specific user to have modify permissions. If they have full control they can change the folder permissions if policies are not set to prevent this.

SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 4
    Last Post: 1st February 2011, 10:27 AM
  2. Permissions on root home
    By theeldergeek in forum Mac
    Replies: 2
    Last Post: 2nd February 2010, 09:16 PM
  3. Resetting Permissions for Student Home Folders
    By Zoom7000 in forum Windows
    Replies: 11
    Last Post: 5th December 2007, 10:33 AM
  4. Replies: 2
    Last Post: 6th October 2007, 09:46 AM
  5. Replies: 27
    Last Post: 25th January 2007, 03:42 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •