Search the Community

I am struggling to get folder redirection to work in windows 7. When I click on 'document' I get the following error: This operation has been cancelled due to the restrictions in effect on this computer. please contact your system administrator.. when I look in the event log, I get the following: Failed to apply policy and redirect folder "Documents" to "\\svr\username$\". Redirection options=0x80001210. The following error occurred: "Can not create folder "\\svr\username$"". Error details: "This security ID may not be assigned as the owner of this object. ". it appears that it is trying to create the documents folder in the users share... the user has full permisions on their share. any ideas? thanks

Hi I've got a number of user folders (in one folder) and I need to share these out. Security permissions are set for only the owner to be able to access them. What I'd like to do is make sure the share is also hidden. Has anyone got a script that will do this for me please? Thanks in advance J. OS: Windows 2008 R2

Hi Im finding something really hard to get my head around regarding ACL on my share folder Basically im setting a mapped drive from a share, now ive got my users in a Global group and got my ACL group setup as Domain Local group, so as you can imagine i place my global users within the domain local group for the share so they can save work to the mapped drive! its all works. but i dont want them to see file permissions when they right click on a file or folder. (petty i know) but im sure it can be done. so far the only permissions set are administrators and system group full control and my ACL domain local group only has Traverse Folder / Execute File List Folder / Read Data Read Attributes Read Extended Attributes Create Files / Write data Create Folders / Append Data Write Attibutes Write Extended Attributes Delete there is no where in the ACL of the drive have i set Read Permissions Change Permissions for the ACL Domain Local group for my users. not even on the root of the drive. so when i goto login as a user they can access the drive. create files and folders this is fine and delete is fine too. but if i right click on the any file or folder i can read permissions if i create a folder or file directly from the share on the server under administrator. i got back to the client computer and log in as a users and it denies me to read permissions. which is what i want it seems that if a users creates a file or folder they can read permissions but if its created by administrator on the server they cant! ive even checked on the effective permissions and the Read Permission Change Permission are ticked but i cant see where it is inheriting this from! am i missing something here? HELP! BTW my share permission is set to change and not full control for the users thanks

I am migrating staff file servers and want to make sure that I get the NTFS permissions right first time as I have experienced in the past that it can be very messy and difficult to fix it later. The file server will host Home folders, shared folders, profiles, desktops, downloads and settings(for redirected favorites, links, searches and start menu) and will be located in the main folder ‘Staff’. These are shared and mapped via active directory using DFS paths. So the UNCs look like this: \\Domain\Staff\HomeFolders\%username%\ \\Domain\Staff\DesktopFolders\%username%\ \\Domain\Staff\DownloadsFolders\%username%\ \\Domain\Staff\Settings\%username%\ \\Domain\Staff\Profiles\%username%\ \\Domain\Staff\SharedFolders\ This is what I am trying to achieve: First of all, I would like to make the desktop folder read only so no one can save to the desktop. I would like to prevent all the users from changing the permissions and sharing the folders if folders if possible. The users should not be able to take ownership either. Not sure if there is any way to do this but I would also like to prevent them from putting the files directly in their home folders. I have created folders under SharedFolders for different departments and would like to prevent users from modifying the names of these or creating new folders in SharedFolders. The documents folder and settings will be redirected so I need to know the permissions for these parent folders. I have created a spreadsheet detailing all the folders, groups and permissions which I am sharing here. https://docs.google.com/spreadsheets/d/1K4PrCLboDcVKhnfKiWbvypExGQVcgjT6K9EBRAv6gHc/edit?usp=sharing Also, do I need to go to advanced permissions to achieve this or the six standard permissions will work fine? Moreover, should I be creating new ACL groups as per MS recommendations or the existing groups should serve the purpose? I am having hard time trying to work out what NTFS permissions I need to assign to which groups for different types of folders. I will really appreciate if people can assist me with these. I am open to all suggestions and would like to know if there are any other recommendations to avoid any problems later.