Folder Redirection Permissions

[Allison]

Hi there...

We're running W2K3 Server ... we have implemented folder redirection... and
based on the 'Best Practice' for security settings via Microsoft KB 274443.

Once a new user logs in .. a new folder is created on the share:

\\server\home\jbrown\jbrown's Documents

When I take a look at the NTFS permissions at the \jbrown level... I have to
click the Advanced button to view the 'special' perms... which shows the
user has Full Control applied to 'This Folder Only. I would have thought
that the user would have FULL CONTROL at the 'This folder, subfolders and
files level.

While this is ok I suppose ... since the user can access and open all their
documents... except...

In the event that the administrator needs to drop files into a users home
folder... access is being denied to the user to open the file/folder. The
file/folder being dropped into the users home folder by the administrator
are not inheriting the parent permissions resulting in an access denied
message to the user.

Any ideas? Is this by design??

A.

 

[Allison]

Further to this post...

Based on the KB article referred to below... by giving Everyone the
'CreateFolder/Append Data' to This Folder Only (that being your shared
folder \\server\home)... cause a problem. Now the user can map to
\\server\home and start creating folders????

Any solutions would be super appreciated???

THANKS!!