Another DFS question (root folder ACL's)

Discussion in 'Windows Server' started by Freaky, Sep 8, 2006.

  1. Freaky

    Freaky Guest

    Hey there,

    have another issue with DFS / ACL's on the root folder.

    We have Global as root, but it's only used to create links under it.

    Under Global we have the links
    Share
    Home
    Profile
    Software

    This is mainly on the Home and Profile shares.

    These are located on 6 servers, all on D:\Home and D:\Profile. All
    servers share it as Home and Profile. Only one server has the rights on
    D:\Home and D:\Profile correct (allow users to traverse/read the
    folders, on the other server the ntfs rights only allow administrators in).

    The server that has the rights right also started the replication. As it
    turns out it thus replicated the rights on the files right, but not on
    the folders, and I think this is causing the strange problems on other
    locations (which are quited weird).

    Sometimes people can load their profiles/home folders, sometimes they
    can't. Even weirder, I've seen user w/o a profile upon creation create
    the files for the user registry (ntuser.*) and create some folders only
    to get an error then that it can't write to the roaming profile. Folders
    under application data are empty and folders like favorites weren't even
    created.

    So according to the NTFS rights on the root folders, they shouldn't be
    able to traverse to the actual profile/home directories which would make
    them unable to read/write in it at all. Appearantly this only works
    partly....

    Can anyone clarify this?

    TIA & Regards
     
    Freaky, Sep 8, 2006
    #1
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.