Lanwench
Mon Jul 14 12:47:18 PDT 2008
Jason Lehman WC <JasonLehmanWC@discussions.microsoft.com> wrote:
> Thanks for replying Richard.
> I am not too worried about my file securiy, though I will check what I
> currently have against what you suggested.
> Breifly, the users currently have full access to the root & full
> access to their own folder. They have no access to anybody else's
> folders.
> The admins have full access to everything.
>
> I'm not even sure why the shares are hidden w/ the $. Sounded like
> another way to secure things.
Yep. Nobody can browse the shares that way. I always hide shares.
> Again, this is a inheritted network that is now mine.
> Maybe I could try just removing the $, so the shares are NOT hidden.
> Don't know if that will change anything or not.
It won't. You need the policy setting...
> I agree, if the security is setup properly; there probably is no
> reason to hide the shares.
Belt + suspenders!
>
> It is just a lot of work to go around re-shareing everything.
> Thank you again for your reply
>
>
> "Richard Price" wrote:
>
>> I recently did exactly what I think you are trying to do, and a
>> hidden share is not what you are after - the correct permissions,
>> however, are.
>>
>> Locations:
>> F:\Test (shared as \\domain\Test)
>> F:\Test\Mike
>> F:\Test\Richard
>>
>> Permissions:
>> \\domain\Test Share Permissions
>> Authenticated Users: Full Control
>>
>> F:\Test NTFS Permissions
>> Advanced -> 'Allow Inherited' unticked, permissions removed
>> Local Admins: Full Control (This Folder Only)
>> Domain Admins: Full Control (This Folder, Subfolders and
>> Files)
>> System: Full Control (This Folder, Subfolders and Files)
>> Authenticated Users: Special (This Folder Only)
>> + Traverse Folder/Execute File
>> + List Folder/Read Data
>> + Read Attributes
>> + Read Extended Attributes
>> + Read Permissions
>>
>> F:\Test\Mike NTFS Permissions
>> Advanced -> 'Allow Inherited' unticked, permissions removed
>> Local Admins: Full Control (This Folder Only)
>> Domain Admins: Full Control (This Folder, Subfolders and
>> Files)
>> System: Full Control (This Folder, Subfolders and Files)
>> User 'Mike': Full Control (This Folder, Subfolders and Files)
>>
>> The above allows users full access to their own folders, read access
>> to the root folder, no access to anyone elses folder, and still
>> allows admins to add/remove folders in the root folder.
>>
>> You can then map \\domain\Test\mike to U:\ without having to hide the
>> share - other users cannot get access to the folders anyway.
>>
>> From here:
>>
http://groups.google.co.uk/group/microsoft.public.windows.server.general/browse_thread/thread/974df7bcc3d47c50/01449299fac9d367?hl=en
>>
>> Works perfectly in my environment, seems like it would work for you.
>>
>> Regards
>> Richard