Users Shared FOLDERS Security and mapping Question...

Discussion in 'Windows Small Business Server' started by Dale, Sep 2, 2005.

  1. Dale

    Dale Guest

    Hello...

    I have a question about the default USERS SHARED FOLDERS\USERNAME that
    Windows SBS 2003 Server creates when you run the ADD USER wizard...

    It seems that that everyone can read each others folders and that SBS does
    not setup those folders to be private for each user.

    What can I do to make those folders private for each user?

    Also, I want to map the user folder to the H: drive. Currently I am mapping
    it like this...

    NET USE H: \\SERVERNAME\USERS

    The problem is that each user can see each others folder names.

    How can I map it like this in the login script? . . .
    NET USE H: \\SERVERNAME\USERS\USERNAME ?

    Please email me the answers as I am at work and don't have access to this
    news feed from work.

    Dale Allen
    MCP, MCSE, MCP+I CCNA
    www.daleallen.com
     
    Dale, Sep 2, 2005
    #1
    1. Advertisements

  2. Dale

    Crina Li Guest

    Hi Dale,

    Thank you for posting in SBS newsgroup.

    I am sorry for the delayed response due to weekend. Please understand that
    the newsgroups are staffed weekdays by Microsoft Support professionals to
    answer your systems and applications questions. Your understanding is
    greatly appreciated!

    Regarding the issue "everyone can read each others folders", please check
    if the NTFS permissions and the Sharing permissions to the Users Shared
    Folder are properly set:

    NTFS permissions:

    Domain Admin: Full Control
    Domain Users Special - Apply onto "This folder and files" -Allow: Traverse
    Folder/Execute Files, List Folder/Read Data, Read Attributes, Read Extended
    Attributes, Create Folders/Append Data, Read Permissions
    System: Full Control
    SBS Folder Operators: Full Control

    Sharing permissions:

    Domain Admins, Domain Users, SBS Folder Operators: Full Control

    NTFS permissions for the individual Users Folder:

    Domain Admin Full Control (Inherited)
    System Full Control (Inherited)
    SBS Folder Operators Full Control (Inherited)
    Individual user Full Control (Not Inherited)

    Regarding the "map user folder to the H: drive", you can use the following
    in the login script

    net use \\server\Users\%USERNAME%

    Hope the information help and I look forward to your reply.

    Best regards,

    Crina Li (MSFT)

    Microsoft CSS Online Newsgroup Support

    Get Secure! - www.microsoft.com/security

    =====================================================
    This newsgroup only focuses on SBS technical issues. If you have issues
    regarding other Microsoft products, you'd better post in the corresponding
    newsgroups so that they can be resolved in an efficient and timely manner.
    You can locate the newsgroup here:
    http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

    When opening a new thread via the web interface, we recommend you check the
    "Notify me of replies" box to receive e-mail notifications when there are
    any updates in your thread. When responding to posts via your newsreader,
    please "Reply to Group" so that others may learn and benefit from your
    issue.

    Microsoft engineers can only focus on one issue per thread. Although we
    provide other information for your reference, we recommend you post
    different incidents in different threads to keep the thread clean. In doing
    so, it will ensure your issues are resolved in a timely manner.

    For urgent issues, you may want to contact Microsoft CSS directly. Please
    check http://support.microsoft.com for regional support phone numbers.

    Any input or comments in this thread are highly appreciated.

    =====================================================

    This posting is provided "AS IS" with no warranties, and confers no rights.
    --------------------
    | From: "Dale" <>
    | Subject: Users Shared FOLDERS Security and mapping Question...
    | Date: Thu, 1 Sep 2005 22:22:10 -0400
    | | Newsgroups: microsoft.public.windows.server.sbs
    |
    | Hello...
    |
    | I have a question about the default USERS SHARED FOLDERS\USERNAME that
    | Windows SBS 2003 Server creates when you run the ADD USER wizard...
    |
    | It seems that that everyone can read each others folders and that SBS does
    | not setup those folders to be private for each user.
    |
    | What can I do to make those folders private for each user?
    |
    | Also, I want to map the user folder to the H: drive. Currently I am
    mapping
    | it like this...
    |
    | NET USE H: \\SERVERNAME\USERS
    |
    | The problem is that each user can see each others folder names.
    |
    | How can I map it like this in the login script? . . .
    | NET USE H: \\SERVERNAME\USERS\USERNAME ?
    |
    | Please email me the answers as I am at work and don't have access to this
    | news feed from work.
    |
    | Dale Allen
    | MCP, MCSE, MCP+I CCNA
    | www.daleallen.com
    |
    |
    |
    |
     
    Crina Li, Sep 5, 2005
    #2
    1. Advertisements

  3. Dale

    Dale Guest

    Hi Crina Li!

    Am I to understand that if I check the users folder permissions as you say
    to do here, that each user will have a private folder?

    And how can I make the wizard setup these permissions as the default. I
    want these folders that the wizard sets up to be the default *private*
    folder for each user.

    Dale
     
    Dale, Sep 5, 2005
    #3
  4. Dale

    Crina Li Guest

    Hi Dale,

    Thanks for your reply.

    Checking the permissions I have provided in my previous reply only to make
    sure that users have correct permission on another's folder. However, the
    user can still see another's folder. If you have updated SBS to SBS SP1,
    you can use ABE to increase folder level security. To get detailed
    information, please refer to the following document:

    Windows Server 2003 Access-based Enumeration
    http://www.microsoft.com/windowsserver2003/techinfo/overview/abe.mspx

    If you have any questions or concerns regarding the issue, please do not
    hesitate to let me know.

    Best regards,

    Crina Li (MSFT)

    Microsoft CSS Online Newsgroup Support

    Get Secure! - www.microsoft.com/security

    =====================================================
    This newsgroup only focuses on SBS technical issues. If you have issues
    regarding other Microsoft products, you'd better post in the corresponding
    newsgroups so that they can be resolved in an efficient and timely manner.
    You can locate the newsgroup here:
    http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

    When opening a new thread via the web interface, we recommend you check the
    "Notify me of replies" box to receive e-mail notifications when there are
    any updates in your thread. When responding to posts via your newsreader,
    please "Reply to Group" so that others may learn and benefit from your
    issue.

    Microsoft engineers can only focus on one issue per thread. Although we
    provide other information for your reference, we recommend you post
    different incidents in different threads to keep the thread clean. In doing
    so, it will ensure your issues are resolved in a timely manner.

    For urgent issues, you may want to contact Microsoft CSS directly. Please
    check http://support.microsoft.com for regional support phone numbers.

    Any input or comments in this thread are highly appreciated.

    =====================================================

    This posting is provided "AS IS" with no warranties, and confers no rights.
    --------------------
    | From: "Dale" <>
    | References: <>
    <y9Nmt#>
    | Subject: Re: Users Shared FOLDERS Security and mapping Question...
    | Date: Mon, 5 Sep 2005 16:59:42 -0400
    | | Newsgroups: microsoft.public.windows.server.sbs
    | |
    | Hi Crina Li!
    |
    | Am I to understand that if I check the users folder permissions as you say
    | to do here, that each user will have a private folder?
    |
    | And how can I make the wizard setup these permissions as the default. I
    | want these folders that the wizard sets up to be the default *private*
    | folder for each user.
    |
    | Dale
    |
    ||
     
    Crina Li, Sep 6, 2005
    #4
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.