Windows Shares / NTFS permissions on folder redirection in Active Directory

Posted by Shawn Gradwell on Server Fault See other posts from Server Fault or by Shawn Gradwell
Published on 2012-06-17T17:32:00Z Indexed on 2012/06/19 15:18 UTC
Read the original article Hit count: 416

Filed under:

directory-permissions

|

folder-redirection

A client has folder redirection in AD setup on each user's Home Folder set to the Z:\ drive as \server\share\username. A Group Policy redirects the user's Documents to the user's Home Folder with the option 'Grant the user to exclusive rights to Documents' selected.

The share on the server has permissions for the relevant user security group with 'Full Control', but each user's folder only have NTFS permissions only for 'CREATOR OWNER' and 'Domain Admins'.

Why can the different users access other user's folders? I thought the most restrictive permissions applied effectively between the share and the NTFS permissions.

Also, this setup has been like this for years, and this client recently updated all client computers to Windows 7. What is the best way to setup this redirection now? I assume only in Group Policy, also Basic Redirection - to create a folder for each user under the root path?

© Server Fault or respective owner

Related posts about directory-permissions

Mailman Error / Cpanel

as seen on Server Fault - Search for 'Server Fault'
Mailman is giving off this error when any changes are made to the list: ======================= Bug in Mailman version 2.1.14 We're sorry, we hit a bug! Please inform the webmaster for this site of this problem. Printing of traceback and other system information has been explicitly… >>> More
Root directory permissions on Mac OS X 10.6?

as seen on Super User - Search for 'Super User'
Hi, I was wondering if it's normal that the root directory / should be owned by “root”. I get asked for my password every time I want to do something there (e.g. save a file, create a directory) and I don't remember this happening before (though this may just be my faulty memory). Here's the relevant… >>> More
mount nfs subdirectory and still apply parent directory permissions

as seen on Server Fault - Search for 'Server Fault'
A NFS server exports : /export/home computers /export/cont1 computers On the filesystem, there are these permissions : $ ls -al /export/cont1 drwxr-x--- 6 root group1 4096 2010-05-04 10:57 . drwxrwxrwx 5 root root 4096 2010-05-07 14:52 .. drwxrwxrwx 2 root root 4096 2010-05-06… >>> More
Mounting windows shares with Active Directory permissions

as seen on Server Fault - Search for 'Server Fault'
I've managed to get my Ubuntu (server 10.04 beta 2) box to accept logins from users with Active Directory credentials, now I'd like those users to access there permissible windows shares on a W2003 R2 server. The Windows share ("\srv\Users\") has subdirectories named according to the domain account… >>> More
Python - Test directory permissions

as seen on Stack Overflow - Search for 'Stack Overflow'
In Python on Windows, is there a way to determine if a user has permission to access a directory? I've taken a look at os.access but it gives false results. >>> os.access('C:\haveaccess', os.R_OK) False >>> os.access(r'C:\haveaccess', os.R_OK) True >>> os.access('C:\donthaveaccess'… >>> More

Related posts about folder-redirection

Windows 7 Folder Redirection (GPO)

as seen on Server Fault - Search for 'Server Fault'
Hi - I have been fighting this issue for a day or two now, so I am looking for some insight. I am taking over admin duties in a domain of 800 users, and the previous admins really did not employ much of any GPO settings for the clients of the Domain. In each site, there is a location on the file… >>> More
Folder Redirection - Explorer requires manual refresh

as seen on Server Fault - Search for 'Server Fault'
Hello, I am having an issue where - when a users my documents folder is redirected to a DFS share, windows explorer requires a manual refresh after creating a new folder, file, etc. (Interestingly, not when making a new briefcase) I have tried a number of MS knowledge base articles, a hot-fix and… >>> More
Windows 7 libraries and folder redirection nightmare

as seen on Super User - Search for 'Super User'
Hello! In our active directory we deploy a policy to our clients where the personal directory (My documents) is redirected to a file server of ours \server\share\username\Documents In older systems everything worked fine. in Windows 7 some users are experimenting the following symptoms: The Documents… >>> More
Windows 7 libraries and folder redirection nightmare

as seen on Server Fault - Search for 'Server Fault'
Hello! In our active directory we deploy a policy to our clients where the personal directory (My documents) is redirected to a file server of ours \server\share\username\Documents In older systems everything worked fine. in Windows 7 some users are experimenting the following symptoms: The Documents… >>> More
Can Windows 7 enable Folder Redirection via Group Policy?

as seen on Super User - Search for 'Super User'
I'd like to enable folder redirection on my stand-alone Windows 7 Pro box. Is that possible? The Group Policy Editor shown in the Managing Roaming User Data Deployment Guide has a Folder Redirection node that I don't see: >>> More