User restricted to NOT give others permissions on folders

[TCLiven]

Hi There -

Each of our users have a home drive that they have full access on. Some users are creating folders within their home drive and then giving rights to other users to access it. Is there a way I can disable the users ability to search the domain for users? Thanks for your help.

 

[karlisi]

AFAIK no. But you can give Modify not Change permissions for share, this will prevent users from modifying their files and folders permissions.

===
Karlis
ECDL; MCSA

 

[cmeagan656]

I always set up the users so that they can't take ownership or change permissions on their home drive. I have it so that only the user, system (for antivirus access in our case), and administrators group have full control.

Cheers.

 

[TCLiven]

Thanks to both of you. I was hoping there was some type of registry entry that I could kill. I'll try the suggestions you gave and see how it goes. Thanks for your time!

 

[TCLiven]

I tried both of your suggestions to no luck. The problem is not the home drive itself, but a folder the user creates within home. I know actually locking down the folder is a no go, but I was hoping to deny the ability to search for users in the domain. I'll keep looking, probably a wasted effort though. Thanks again.

 

[cmeagan656]

When you set the permissions for the user's home directory make sure that they apply to the home directory, subfolders, and files. It's always worked for me.

ONLY the specific user, SYSTEM, and administrators group should be listed on the permissions tab.

When a user creates a new folder or file in their home directory the folder or file inherits the permissions from the home directory which means that they can't change the permissions on the newly created folder or file.

Also, although the user can see the other users if the user clicks on another user then they should get an "access denied".

Cheers.