Offline Files & Permissions

[Joe Vondra]

I have administratively assigned a 'Standards' folder to be available
offline through group policy to a laptop OU. This assigned folder contains a
subfolder named 'Accounting', which is assigned permissions so that it is
only accessable by members of the 'Accounting' group. When a Domain User
logs on to the laptop while it is connected to the network, they cannot
access the 'Accounting' folder. When the same users disconnects from the
network and logs into the laptop using their cached credentials, the user is
able to view and open the contents of the 'Accounting' folder.

Is this normal operation for offline files or do I need to perform
additional configuration to secure the 'Accounting' folder at all times?

 

[Jeffrey Randow (MVP)]

Oohh.. That's interesting... You wouldn't expect that to be the
case...

I'll try to reproduce tomorrow at the office..

Jeffrey Randow (Windows Networking & Smart Display MVP)
(e-mail address removed)

Please post all responses to the newsgroups for the benefit
of all USENET users. Messages sent via email may or may not
be answered depending on time availability....

Remote Networking Technology Support Site -
http://www.remotenetworktechnology.com
Windows XP Expert Zone - http://www.microsoft.com/windowsxp/expertzone

 

[Bill Sanderson]

The only thought I had was NTFS vs FAT (i.e. is the laptop drive formatted
FAT)--and if so, surely there ought to be some form of warning about this
gotcha--or maybe I am totally off the mark?

 

[Joe Vondra]

The laptop drive is formatted NTFS. Good thought though.

 

[Bill Sanderson]

Sounding definitely buggish, assuming that the laptop is joined to the
domain.

 

[Joe Vondra]

Hmm,
I'll reinstall and see what happens.

Sounding definitely buggish, assuming that the laptop is joined to the
domain.

 

[Jeffrey Randow (MVP)]

I reproduced it and bugged it with SP2, not that I think it could be
fixed in that timeframe...

Jeffrey Randow (Windows Networking & Smart Display MVP)
(e-mail address removed)

Please post all responses to the newsgroups for the benefit
of all USENET users. Messages sent via email may or may not
be answered depending on time availability....

Remote Networking Technology Support Site -
http://www.remotenetworktechnology.com
Windows XP Expert Zone - http://www.microsoft.com/windowsxp/expertzone

 

[Jeffrey Randow (MVP)]

Definately a bug...

Jeffrey Randow (Windows Networking & Smart Display MVP)
(e-mail address removed)

Please post all responses to the newsgroups for the benefit
of all USENET users. Messages sent via email may or may not
be answered depending on time availability....

Remote Networking Technology Support Site -
http://www.remotenetworktechnology.com
Windows XP Expert Zone - http://www.microsoft.com/windowsxp/expertzone

 

[Joe Vondra]

Thanks for your time & effort.

I reproduced it and bugged it with SP2, not that I think it could be
fixed in that timeframe...

Jeffrey Randow (Windows Networking & Smart Display MVP)
(e-mail address removed)

Please post all responses to the newsgroups for the benefit
of all USENET users. Messages sent via email may or may not
be answered depending on time availability....

Remote Networking Technology Support Site -
http://www.remotenetworktechnology.com
Windows XP Expert Zone - http://www.microsoft.com/windowsxp/expertzone