Homefolder Security

[Optimus]

I have setup my homefolders for pupils like:-

\\server\homefolders$\username\My Documents - permission to read attributes, traverse, create folders, list folders (this folder only)

 

Which is working as expected... However, the users H:\ drive is called H:\server\homefolders$\username\My Documents - so a nosey pupil can then create a shortcut to the above path - but then go up levels until they reach homefolders.. And make new folders!

 

How do you do it? If I could rename H:\ that would 'hide' the full path from users..

 

Thanks,

 

Optimus

[Michael]

I share home drives as follows:

 

\\Servername.domain.domain\username$

 

Domain Admins and the user themselves have Full Control of their home folder and even if someone manually navigates to it, they'll get an Access Denied message. I've used this method since Windows 2000, which makes me very old

[TheMinister]

H Drive

'Domain\User' - (Modify)

'Teachers' Group - (Read Only)

'Domain Admins' - (Full)

 

This only gives that user particular user access to their own documents. Even if they traverse 'up' the UNC path, they can't see any other folders as they don't have the rights to.

[ricki]

HI

 

I put my home folders through dfs and they look like domain.users$.intake.username.

 

I also use travers have a look at Windows 101: Know the basics about NTFS permissions | TechRepublic for details

 

Windows 101: Know the basics about NTFS permissions | TechRepublic

 

Other people cannot navigate to the path if they dont have the ntfs permission. Teachers in school can get into students work but only the correct student can get into their folder.

 

Richard

Edited July 25, 2012 by ricki