itschad Posted September 11, 2008 Posted September 11, 2008 I created student folders for my students to logon.I thought I set the permissions right. Anyways, I just tested one, and the students get their folder mapped as planned. However, I then connected to the server and browsed, while logges on as a student I could get to the other students directories and delete, and write to their folders. I have the permissions on each folder set to as follows: Username(Whatever it is) : Full Control Administrators : Full Control System : Full Control HomeDirectoryServer\Users: Read Execute List Files Am I missing something or some reason why students can see other students folders and files? Thanks, Chad
Quackers Posted September 11, 2008 Posted September 11, 2008 We have on the root home folder Pupils: List Folder, Read Attributes, Read Extented and Read System: Full Domain Admins: Full Staff: Read Then in Active Directoy Users and Computers i highlight all users, select properties, then click home folder, type in say \\server\homeshare\yeargroup\%username% and creates all the folders and sets all the right user permissions on each folder so they can only see inside there own.
itschad Posted September 11, 2008 Author Posted September 11, 2008 This is exactly how we had it setup. We entered //ServerName/Students/School/Grade/%username% There were no errors or problems reported. I have done this same thing in the past and never had this problem. I thought maybe I had missed a step. I would change the permissions, however, I am uncertain what I would change them to. Since the permissions appear to be correct to me.
Quackers Posted September 11, 2008 Posted September 11, 2008 Just thought, on the student group with read, do you have "This folder only" set or "All sub folders and files" Needs to be this folder only to stop it inherating down
tomscaper Posted September 12, 2008 Posted September 12, 2008 Ours share only has the read attribute set for the student group. Also as Quackers said setting to this folder only, also do they really need list folder /read data as ours does not have that attribute set.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now