Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
Name: tonysathre
i have set up a volume (partition) for home folders on my server and shared it. i then created my users and set there home directory paths with \\server\share\%username%. when i log in with the users i can see my network drive mapped out to the correct location. the problem is, is that with a typical user i can do a UNC path to the root share where all the home folders are stored on my server and see a listing of all the home dirs of everyone else in the domain, i can also view and browse whats in them but i cannot add or delete anything which is what i want. i dont want some IT savvy users that are on the network to be able to do UNC paths out to shares and get into and view other users home folder contents.
i have the share permissions set up like this:
administrators (Domain\administrators: Full Control
authenticated users: change, read
creator owner: change, read
i have the volume (NTFS) permissions set up like this:
administrators (Domain\administrators): full control
authenticated users: read
system: full control
what am i doing wrong, in 2000 server permissions where a lot easier.

Just a thought...How (On which folders) have you set up the permissions. In Server 2003 share and NTFS permissions work together with the most restrictive of the two being applied.If you set a share permission on the parent folder then all child folders will have the same permission..so that anyone can read any file or folder in the shared parent.Maybe better to leave the share permission as is and assign NTFS permissions to only the owner of the home folder aka the specific user ( and maybe admins).
Just a thought.

Are these Admin shares? Meaning:
\\server\share\userid$
If not, anyone can see that the shares exist, even if they don't have permission to access.
My advise, rename the shares as Admin shares.
Soylent Green is PEOPLE!!!

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |