User Share Permission

[Tenju]

I am trying to creator a User share that will get Redirected folders stored to it and i would like for only the Administrators and the User of the folder to view the folder and all the contents of the folder. I do not want everyone on the network to be able to view each others documents. Anyone have any ideas. I'm using Win2K8 Server

 

[Stevehewitt]

This KB article answers that exact question. Says 2000/2003 but applies to 2008 as well.

http://support.microsoft.com/kb/274443

Basically the share is set for everyone to read/write, however the NTFS permissions should be that admins have full control, your users can create folders, and that any folders created should have full access for the creator. E.g. you set your redirect to:

\\server\users\%username%

The permissions on the Users folder for NTFS is to allow users to create folders only. Then set CREATOR OWNER to have full permissions. This way users that create their own folders (which they will when they pickup the policy) will have full access to the foler - however nobody else but the administrator will.

Steve.

"They have the internet on computers now!" - Homer Simpson