Jump to content
EduGeek EdSec 2026 is Go! 27th Oct in Derby! Join us for a day of EdTech security focused talks, networking, and an evening social ×

Recommended Posts

Posted

I am having a problem with gaining access to user's My Documents area on the server. The scenario is as follows:

 

I have been trying to implement a Roaming profile system for a server 2003 where each user is assigned a default user profile the first time they log on. I have successfully managed to do this. I am storing profiles on the \\servername\share and set the permissions to everyone: change. I have set the local profile location for each user in ADUC. This all works fine and has been tested.

 

I want to use folder redirection so the user's My Document's folder is automatically redirected to a server share. I have set up a shared folder \\servername\User's Work. The share permissions on this folder are Everyone: Change. I have then set a GPO on the OU for these users for folder redirection to store the work their work on \\servername\user's work via User Configuration|Windows Settings|Folder's Redirection. I have set the My Document's properties to 'Basic-redirect everyones folder to the same location'. Under Target Location I have the setting 'Create a folder for each user under the root path' so it inserts a folder automatically. I have inserted the share \\servername\User's Work as the root path. Under the settings tab I have UNTICKED the box 'Grant the user exclusive right to My Documents'. All the user's My Documents are now being redirected to the server and this works. My main problem is if I log onto to the server as Administrator I cannot access these user's My Documents and get the following message "\\\Users Work\test003 is not accessible. Access is denied". If I go to the security tab of the particular folder I get the message "you do not have permission to view or edit the current permission settings for MyDocuments, but you can take ownership or change auditing settings '. Can anyone tell me why this is, as I don't no if it can cause problems with other things.

 

Any help greatly appreciated. Thanks in advance.

Posted
I thought this was the way things are supposed to work - you as Administrator set things up - peoples documents are private to them :?

 

regards

Simon

 

And yet, when it creates their home folder when you assign one, it uses administrator full, user full. I always add administrator to to roaming profiles in the policy. Its a right pain if you don't

Posted
Yea I don't use "exclusive access to user directory" Domain admins have access to all user folders and Staff have access to students user folders to get the pupils work out of them for electroinc marking by OCR for clait.

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now



×
×
  • Create New...