I
Ian Henderson
Hi.
We recently had a problem with the Sasser worm, which highlighted a few
problems with our anti-virus provision (see, every cloud does have a silver
lining).
One of the things we found was that our anti-virus software was unable to
scan the profile folders on the server, because the Administrator account
did not have sufficient rights to those folders.
As a result of this, what I did was to change the rights to the profiles
folder itself, so that Administrator was set as the owner of both it, and
all subsequent sub-folders. However, in doing so, I granted everyone the
right of access to every profile. (Oops!).
Now, as a result, we've got a network where everyone can see everyone else's
profile, which is obviously not right. Therefore, I'm going to have to go
through each folder manually, remove the Everyone group entirely, and add in
the correct user, with Full Control privileges.
Since we've got over 300 users, is there a way of automatically setting each
folder, so that only the Administrator and the relevant user can access each
folder, without having to go through each profile in turn?
I hope someone can help me, or I'm in for a very long shift!
TIA
Ian Henderson
We recently had a problem with the Sasser worm, which highlighted a few
problems with our anti-virus provision (see, every cloud does have a silver
lining).
One of the things we found was that our anti-virus software was unable to
scan the profile folders on the server, because the Administrator account
did not have sufficient rights to those folders.
As a result of this, what I did was to change the rights to the profiles
folder itself, so that Administrator was set as the owner of both it, and
all subsequent sub-folders. However, in doing so, I granted everyone the
right of access to every profile. (Oops!).
Now, as a result, we've got a network where everyone can see everyone else's
profile, which is obviously not right. Therefore, I'm going to have to go
through each folder manually, remove the Everyone group entirely, and add in
the correct user, with Full Control privileges.
Since we've got over 300 users, is there a way of automatically setting each
folder, so that only the Administrator and the relevant user can access each
folder, without having to go through each profile in turn?
I hope someone can help me, or I'm in for a very long shift!
TIA
Ian Henderson