Help: Students logging onto MACS messing up Windows permissions

[JJonas]

First time MAC users here

 

We have a new suite of MACS.

 

They are connected to Windows using SMB: and Acronis Access Connect

 

We have found when students log onto them they cannot save their work.

 

Closer investigation reveals Everyone: Deny has been applied to the following folders.

 

Desktop

Documents

Movies

Music

Pictures

 

I can fix it by removing the Everyone: Deny but why is it happening in the first place and how do I stop it?

Edited September 3, 2015 by JJonas

[Carter]

What I've learned from dealing with Windows Shares used with Macs is to never touch permissions from the Mac side. Only ever set permissions on the Windows server. Now that said, when we created shares on the Windows server there are a few steps that need to be made just to make the shares work for Windows and Mac the way we need. Each time I need to look at a two page document to follow the steps.

[JJonas]

@Carter That sounds useful please can you post it?

[DavR]

Mac's stomp all over your Windows permission in Homeshare if you let them, adding denies all over the place.

 

What I've done in the past is change the permissions on the Windows share containing your home directories to Everyone Read + Change, but NOT Full Control. Read + Change allows the users to save and modify documents, but removing Full Control means that Mac can't change your permissions under that users credentials.

[BOFHxx]

First time MAC users here

 

We have a new suite of MACS.

What version of OS X?

 

They are connected to Windows using SMB: and Acronis Access Connect

 

Acronis Access Connect provides AFP sharing on Windows - are you sure you are using SMB for sharing and not AFP via Acronis..?

 

We have found when students log onto them they cannot save their work.

 

Closer investigation reveals Everyone: Deny has been applied to the following folders.

 

Desktop

Documents

Movies

Music

Pictures

 

I can fix it by removing the Everyone: Deny but why is it happening in the first place and how do I stop it?

 

When a user logs into OS X, if there is no existing home folder, it will create one with the default settings. In OS X, the POSIX settings for folders under the user home folder will be 700 which translates to the owning user has RW+x, group has nothing, and everyone else have nothing. I suspect something on your Windows side is deciding that 'nothing' = Deny, which on Windows of course will override 'allow', causing the problem. I would suspect Acronis which if you are using Yosemite for example, should not be required as you can tell OS X to use SMB for home folders via the dsconfigad command in the Terminal.

[cleverleyson]

Just started getting this problem ourselves, sadly we were pushed into upgrading our macs to Yosemite and getting some new ones in, So we sort of fallen into this problem. read some interesting stuff here https://community.spiceworks.com/topic/440485-os-x-10-6-8-can-t-delete-folder-copied-to-windows-share. Edited September 24, 2015 by cleverleyson

[cleverleyson]

Also wouldn't it be wise to set the permissions on the library folder too?

[HereIGoAgain2601]

We had so many problems with network home folders in 10.8 and 10.9 that we decided to force the local home folder and just map the network home as a dock icon. Not ideal but we make students copy work to the folder and off again. We do have the occasional lost file but the staff and students know the score and its their responsibility to transfer it over. We use time machine to backup the Mac user folder just in case though. I was dead against the local home folders at first but our Mac issues have gone from being every lesson to once or twice a week now.