Prev: Try to connect Windows 7 pro to SBS 2003
Next: Trying to connect Windows 7 home to SBS 2008
From: D.Sweet on 14 May 2010 12:14
I have a standard installation of SBS 2003 Small Business Server. All users
were set up using the Server Management Console cumputers added the same way,
Working off a single Domain.
User My documents are redirected to a share (Ussers Shared Folders) on the
server. If a user goes to the shared folder on the server through a UNC
address he is able to open any of the folders there no mater who the owner
is. Also when doing a sync for his folders it syncs all the users on the
machine or that have been on the machine.
Is there a way to eliminate the ablity of a user to have access to another
users files? Can this be done Globally? Will It fix the File sync issue.
Thank you in advance for any and all input.
--
D.Sweet
From: Dave Nickason [SBS MVP] on 14 May 2010 12:49
First, open the policy that is controlling redirection in the group policy
editor. The settings are in User Configuration -> Policies -> Windows
Settings -> Folder Redirection. R-click Documents -> Properties. On the
Settings tab, make sure "Grand the user exclusive rights to Documents" is
checked.

Then, get this KB and fix the permissions on the existing redirected
folders:

How to dynamically create security-enhanced redirected folders by using
folder redirection in Windows 2000 and in Windows Server 2003
http://support.microsoft.com/default.aspx/kb/274443/en-us?p=1

And lastly, for the sync story, see this:

Files that you add to the Offline Files folder on a Windows XP-based
computer are synchronized when another person uses the computer
http://support.microsoft.com/kb/811660


"D.Sweet" <DSweet(a)discussions.microsoft.com> wrote in message
news:DC38E70E-6057-43F8-B256-A6E84C575F14(a)microsoft.com...
> I have a standard installation of SBS 2003 Small Business Server. All
> users
> were set up using the Server Management Console cumputers added the same
> way,
> Working off a single Domain.
> User My documents are redirected to a share (Ussers Shared Folders) on the
> server. If a user goes to the shared folder on the server through a UNC
> address he is able to open any of the folders there no mater who the owner
> is. Also when doing a sync for his folders it syncs all the users on the
> machine or that have been on the machine.
> Is there a way to eliminate the ablity of a user to have access to another
> users files? Can this be done Globally? Will It fix the File sync issue.
> Thank you in advance for any and all input.
> --
> D.Sweet

From: Leythos on 14 May 2010 13:42
In article <DC38E70E-6057-43F8-B256-A6E84C575F14(a)microsoft.com>,
DSweet(a)discussions.microsoft.com says...
>
> I have a standard installation of SBS 2003 Small Business Server. All users
> were set up using the Server Management Console cumputers added the same way,
> Working off a single Domain.
> User My documents are redirected to a share (Ussers Shared Folders) on the
> server. If a user goes to the shared folder on the server through a UNC
> address he is able to open any of the folders there no mater who the owner
> is. Also when doing a sync for his folders it syncs all the users on the
> machine or that have been on the machine.
> Is there a way to eliminate the ablity of a user to have access to another
> users files? Can this be done Globally? Will It fix the File sync issue.
> Thank you in advance for any and all input.

Are any of your users SBS Admins?

--
You can't trust your best friends, your five senses, only the little
voice inside you that most civilians don't even hear -- Listen to that.
Trust yourself.
spam999free(a)rrohio.com (remove 999 for proper email address)
From: D.Sweet on 14 May 2010 17:37
only 1 - myself and I think I am going to demote to Power user and start
using the default Administrator account for admin purposes.
--
D.Sweet


"Leythos" wrote:

> In article <DC38E70E-6057-43F8-B256-A6E84C575F14(a)microsoft.com>,
> DSweet(a)discussions.microsoft.com says...
> >
> > I have a standard installation of SBS 2003 Small Business Server. All users
> > were set up using the Server Management Console cumputers added the same way,
> > Working off a single Domain.
> > User My documents are redirected to a share (Ussers Shared Folders) on the
> > server. If a user goes to the shared folder on the server through a UNC
> > address he is able to open any of the folders there no mater who the owner
> > is. Also when doing a sync for his folders it syncs all the users on the
> > machine or that have been on the machine.
> > Is there a way to eliminate the ablity of a user to have access to another
> > users files? Can this be done Globally? Will It fix the File sync issue.
> > Thank you in advance for any and all input.
>
> Are any of your users SBS Admins?
>
> --
> You can't trust your best friends, your five senses, only the little
> voice inside you that most civilians don't even hear -- Listen to that.
> Trust yourself.
> spam999free(a)rrohio.com (remove 999 for proper email address)
> .
>
From: D.Sweet on 15 May 2010 12:20
See notes below
--
D.Sweet


"Dave Nickason [SBS MVP]" wrote:

> First, open the policy that is controlling redirection in the group policy
> editor. The settings are in User Configuration -> Policies -> Windows
> Settings -> Folder Redirection. R-click Documents -> Properties. On the
> Settings tab, make sure "Grand the user exclusive rights to Documents" is
> checked.

This is enabled and checked

> Then, get this KB and fix the permissions on the existing redirected
> folders:
>
> How to dynamically create security-enhanced redirected folders by using
> folder redirection in Windows 2000 and in Windows Server 2003
> http://support.microsoft.com/default.aspx/kb/274443/en-us?p=1

If I understand correctly I go to the shared Users folder and Properties,
then under the Sharing Tab click on Share permissions. At this point the only
thing that I have is:
Domain Admins - Full Controll, Change, Read
Domain Users - Full Controll, Change, Read
Folder Operators - Full Controll, Change, Read

Is this where I should be adding the other permissions by adding the
Everyone , Creator Owner, System Control, Domain Admins with the appropriate
Permissions for each?

> And lastly, for the sync story, see this:
>
> Files that you add to the Offline Files folder on a Windows XP-based
> computer are synchronized when another person uses the computer
> http://support.microsoft.com/kb/811660

This says that the next service pack should have it installed - I currrently
have all machines on SP2 or SP3 (XP) so is this still a needed step?

>
> "D.Sweet" <DSweet(a)discussions.microsoft.com> wrote in message
> news:DC38E70E-6057-43F8-B256-A6E84C575F14(a)microsoft.com...
> > I have a standard installation of SBS 2003 Small Business Server. All
> > users
> > were set up using the Server Management Console cumputers added the same
> > way,
> > Working off a single Domain.
> > User My documents are redirected to a share (Ussers Shared Folders) on the
> > server. If a user goes to the shared folder on the server through a UNC
> > address he is able to open any of the folders there no mater who the owner
> > is. Also when doing a sync for his folders it syncs all the users on the
> > machine or that have been on the machine.
> > Is there a way to eliminate the ablity of a user to have access to another
> > users files? Can this be done Globally? Will It fix the File sync issue.
> > Thank you in advance for any and all input.
> > --
> > D.Sweet
>
> .
>
 |  Next  |  Last
Pages: 1 2
Prev: Try to connect Windows 7 pro to SBS 2003
Next: Trying to connect Windows 7 home to SBS 2008