Prev: KB973917
Next: Problem reading encrypted mails
From: wuzzle on 17 Dec 2009 00:13
Hi, we use delprof to delete inactive profiles. However users started
storing files in all users/default users. Can we use GPO to prevent
access? These are standard users. Thanks
From: Meinolf Weber [MVP-DS] on 17 Dec 2009 01:28
Hello wuzzle,

You can't as far as i know, the default and all users profile are used from
each user logging on. Make them clear where they have to save the data and
more important how your backup policy is and which files will not be backed
up, of course that profiles.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hi, we use delprof to delete inactive profiles. However users started
> storing files in all users/default users. Can we use GPO to prevent
> access? These are standard users. Thanks
>


From: John John - MVP on 17 Dec 2009 12:34
wuzzle wrote:
> Hi, we use delprof to delete inactive profiles. However users started
> storing files in all users/default users. Can we use GPO to prevent
> access? These are standard users. Thanks

No one but administrators and the System account should have write
permissions on the Default User folder. In addition to the above Power
Users are also granted write permissions on the All Users folder. These
are default security settings, the question is, "Why are your users even
allowed to write to these folders?" Either the permissions were relaxed
or they have too much privileges, they belong to one of the above
mentioned user groups.

John
 | 
Pages: 1
Prev: KB973917
Next: Problem reading encrypted mails