Sharing or Security Problem - Possibly?

[ahankiewicz]

To all

 

 

In the past the school have set up the home folders in the follow was

 

 

Year Group (09Intake)

then

Individual Folders for each student (10xxusernamexx)

 

Year Group Share is set as:

 

Year Group = Change + Read

Every One = Full

Admin = Full

 

Year Group Security is set as

 

Year Group = M,R&E,L,R & W

Staff (Teachers) = R&E,L,R & W

Admin = Full

 

Unfortunately since we bought some new higher spec we have a problem – In a number of cases a pupil does not get the correct home instead will see all folders in the group!

 

It seems that the only solve the problem is to set level at the individual folder with Full option.

 

Two questions

 

1. Does any have a easy batch/vbs script to run against the existing folders.

 

2. Why the problem – I was working now it does not.

 

Andrew

[sister_annex]

Year Group Share is set as:

 

Year Group = Change + Read

Every One = Full

Admin = Full

 

Firstly, giving everyone FULL negates the need for the other entries on your Year Group Share

 

I am presuming this is for a Home Directory, if so how are the paths arranged in your AD structure. Something like \\server\yeargroup\userfolder ??

 

if so there is a group policy to alter how shares/ drive letters are mapped - in the user profiles section of Group Policy you want the setting for Mapping Shares to the Root

 

If I am barking up the wrong tree then I do apologise but this is the firt thing i could think about

 

HTH

 

Mark

[ahankiewicz]

Firstly, giving everyone FULL negates the need for the other entries on your Year Group Share

 

OK

 

I am presuming this is for a Home Directory, if so how are the paths arranged in your AD structure. Something like \\server\yeargroup\userfolder ??

 

Home Folder Connect H: To \\server\usergroup\username

 

I have had to change to Connect H: To \\server\username

with the username is now shared -Everyone -Full

 

if so there is a group policy to alter how shares/ drive letters are mapped - in the user profiles section of Group Policy you want the setting for Mapping Shares to the Root

 

 

If I am barking up the wrong tree then I do apologise but this is the firt thing i could think about

 

HTH

 

Mark

 

Does this help?

[sister_annex]

so \\server\username is the share or \\server\group\username?

 

as you had full for everyone on the group share anyway the other perms wouldn't have been used just looks tidier and easier to manage

 

here we do this

 

our user paths are \\server\users$\intake\username

 

only users$ has share permissions allowing 1 point of entry with Everyone FC (less overhaed for the OS also)

 

the username folder has NTFS permissions for staff (modify) relevant user(modify) and admins (FC)

 

this maps to a H:\ Drive using AD

 

in group policy then we had to set the entry that states that shares should be mapped to the root folder to disabled - this should then allow subfolders as drive letters.

 

sharing the username with everyone full is ok as long as your NTFS permissions have been setup correctly otherwise it can be a big security hole

[ahankiewicz]

Thank you - Now I have to think it through again!!

 

Thanks again

 

Andrew