I recently joined an organization that had an NT network setup. They service many clients per day and have set up user accounts such as CLIENT1 - CLIENT2000. Each new client is assigned a new ClientID and password. The problem is, the user folder doesn't allow anyone other than that particular client ID to access the files in it. First off, these user folders are not found under the normal user folder. They are in their own folder called Clients. This folder allows EVERYONE permission. However the security shows only that CLIENTID having access. I try to add ADMINISTRATOR (FULL ACCESS) or the group COUNSELLORS and it is fine for the folder, but when I try to add this new security to the existing folders and files, I get an error - Access Denied. Even if I could change the security one by one it would take me forever to change 2000 accounts. Even when I take ownership as Administrator, this revokes the access to the CLIENT ID and I have to put back their access one by one. THERE MUST BE A BETTER WAY. HELP. Other problem. When any user is logged on to the network and you look at the USERS folder, you see all user folders - even though you can only access those for which you have permission to view. How do you make it so that you only see you own user folder. This is also the case for the CLIENTS. When they logon they see all 2000 ClietIDs under the CLIENTS folder.

sounds like you have a conflict in directory and file level permissions... sounds also like these are in an ntfs partition. Are you a member of te administators group? Or the "owner/creator" of the directory? Only these can modify attributes. you can simplify admin of these accts by grouping them into a global group and then assigning that group into the local group that has been given access to the directory create your permissions at the local group level giving all members in that group the same access rights. Keep in mind that in ntfs, file permissions override directory permissios in that the most restictive access permssion is enforced at the file level. if you can give more details I'll check back.

your system has been setup to create a home directory for each user acct. You can log on as an admin and go to user man for domains and double click a user and ten click the profiles button to see where the path and setup for these directories are maintained. Sounds like a flder called clients on our server. These home directories each user are created during user setup using a %user% variable in the path under the profiles button in user setup dialog box. Typically by default, access is denied to anyone other than the specific user, including the admin unless otherwise setup or as an administrator you "take ownership" of the files. Taking ownership is done as an admin thru the properties dialog for the folder or files securities tab and checking the ownership box, then the take ownership boxof the owners dilog box. Organizing users into groups and assigning permissions to the group and addin and or removing users to this group is much easier than trying to assign permissions individually. You group user by their access permissions you want them to have. You can create groups with differing access permissions and assign differentusers to which ever group meets your desired wishes. Adding, modifing, or removing access just a simple matter of adding or removing a user/users to or from a group. FYI..home directories are created so users can have a private storage area for their data files..is this what you want for your clients? Also, the everyone group full control is created by default each time a folder or file is created. Typically, this group s removed and selective user and group permissions are assigned. Any more questions?