users folders, permissions

amagab · 02-28-2007, 07:06 PM

This is what I want on our file server:

E:\Users\username

Each employee will have their own folder on the Users share. However, they should only have access to their own folder.

How do I create this and how do I set the permissions?

Please give step by step instructions because I'm a novice.

Many Thanks!

crazijoe · 03-01-2007, 06:18 AM

http://support.microsoft.com/kb/324267

amagab · 03-02-2007, 07:43 PM

I can't seem to get it to work. I always find MS' instructions incomplete. What should all users permission be to the Users folder? Should I set up everyone to have Read permission to the Users folder and then full control of their own subfolder? Would that work?

Thanks!

mpkr69 · 03-03-2007, 01:31 AM

In your case, I am assuming that you have the E:\Users folder shared on your network as "Users".
When you share the folder, set the SHARE permissions to Full control for everyone.
Now browse to the E:\shared folder on the server. Right click on the folder you want to set permissions on and go go the "Security" tab. Now click on the "advanced" button on the window that pops up. Uncheck the box that says "Inherit from the parent the permission...". A box will popup asking if you want to copy, remove, or cancel. Select "copy" and then click ok. Now remove everyone from the list of group or user names and add "domain admins" and "administrators" only. Set "full control" access for these groups. Now Add the user whom you want to have exclusive access to this directory. When this user is added to the list, check the full control box for them.

This setup will basically allow local system admins, domain admins, and the specific user assigned to that directoy to access the files within this folder. Anyone else will be denied access to this folder unless they are a member of the local system admins or the domain admins.

NTFS can be extremely confusing so I encourage you to become familiar with NTFS permissions. As a general practice, I would not try to use the deny attribute for setting permissions. In addition, make sure you know how to distinguish user groups and accounts that exist on the domain from the system itself.

amagab · 03-03-2007, 11:18 AM

Thanks, I'll give it a try.

Yes, it sure is confusing. I am coming from an Apple Xserve environment, which is much more straightforward and user friendly.

02-28-2007, 07:06 PM	#1 (permalink)
amagab Registered User Join Date: Oct 2006 Posts: 56 OS: XP and OSX	users folders, permissions This is what I want on our file server: E:\Users\username Each employee will have their own folder on the Users share. However, they should only have access to their own folder. How do I create this and how do I set the permissions? Please give step by step instructions because I'm a novice. Many Thanks!

03-01-2007, 06:18 AM	#2 (permalink)
crazijoe Registered User Join Date: Oct 2004 Location: Omaha, The Center of the Universe Posts: 7,632 OS: WinXP, Win2K3 My System	http://support.microsoft.com/kb/324267 __________________ Microsoft MCSA + Messaging, MVP, A+, Network+ http://i16.photobucket.com/albums/b3...other/Help.jpg Do you want a real Republican? HDD diagnostic tools / HDD data recovery software

03-02-2007, 07:43 PM	#3 (permalink)
amagab Registered User Join Date: Oct 2006 Posts: 56 OS: XP and OSX	I can't seem to get it to work. I always find MS' instructions incomplete. What should all users permission be to the Users folder? Should I set up everyone to have Read permission to the Users folder and then full control of their own subfolder? Would that work? Thanks!

03-03-2007, 01:31 AM	#4 (permalink)
mpkr69 Registered User Join Date: Mar 2007 Posts: 1 OS: WinXP Pro	In your case, I am assuming that you have the E:\Users folder shared on your network as "Users". When you share the folder, set the SHARE permissions to Full control for everyone. Now browse to the E:\shared folder on the server. Right click on the folder you want to set permissions on and go go the "Security" tab. Now click on the "advanced" button on the window that pops up. Uncheck the box that says "Inherit from the parent the permission...". A box will popup asking if you want to copy, remove, or cancel. Select "copy" and then click ok. Now remove everyone from the list of group or user names and add "domain admins" and "administrators" only. Set "full control" access for these groups. Now Add the user whom you want to have exclusive access to this directory. When this user is added to the list, check the full control box for them. This setup will basically allow local system admins, domain admins, and the specific user assigned to that directoy to access the files within this folder. Anyone else will be denied access to this folder unless they are a member of the local system admins or the domain admins. NTFS can be extremely confusing so I encourage you to become familiar with NTFS permissions. As a general practice, I would not try to use the deny attribute for setting permissions. In addition, make sure you know how to distinguish user groups and accounts that exist on the domain from the system itself.

03-03-2007, 11:18 AM	#5 (permalink)
amagab Registered User Join Date: Oct 2006 Posts: 56 OS: XP and OSX	Thanks, I'll give it a try. Yes, it sure is confusing. I am coming from an Apple Xserve environment, which is much more straightforward and user friendly.