XP User Profile Security Issue

[Guest]

We have migrated hundreds of XP desktops from Novell to MS ADS. When it
comes to 3 desktops which share C drive to each other, user B on Computer B
can access to user A's user profile. Same as user A when he can get access
to user B 's My Document.

Is there any way to block them access to other user's Document & Settings
while allowing C drive access.

Thanks.

 

[Steven L Umbach]

Check the folder/NTFS permissions on the folders in question
[properties/security for NTFS volumes and simple file sharing needs to be
disabled in XP Pro] and remove those users/groups that you do not want to
have access. Typically in a user profile you will see system with full
control, possibly administrators with full control, and the user with full
control. Also make sure that the owner of the folder is the user that you
want to have access or possibly administrators. The owner of a folder/file
can always grant themselves permission even if they do not currently have
any permissions. Avoid using deny permissions if at all possible and instead
plan your access control lists to use an implicit deny where the
users/groups that you do not want to have access have no permissions to the
object.

Steve

http://www.mcmcse.com/microsoft/guides/ntfs_and_share_permissions.shtml ---
brief overview of NTFS/share permisisons
http://support.microsoft.com/kb/304040