Home Folder server NTFS permissions and share permissions?!

[UselessUser]

Hi all,

I am setting up a new file server to store the users home folders, and have
the following structure.

Server -> users$ -> home folder of user

I used to have a Microsoft document or KB stating what ntfs and share
permissions I needed to set on the user$ folder for everything to work such
as offline files etc, I have tried searching for it, can anyone help?

Also currently we have an issue with our existing home folder server in that
we as admins cannot get into the folders unless we take ownership... I have
seen there seems to be to ways around this, set the user$ folder to have an
explicit administrator full control permission, which gets inherited, or by
using a GPO? recommendations?

 

[Lanwench [MVP - Exchange]]

Re: Home Folder server NTFS permissions and share permissions?!

UselessUser <UselessUser@discussions.microsoft.com> wrote:
> Hi all,
>
> I am setting up a new file server to store the users home folders,
> and have the following structure.
>
> Server -> users$ -> home folder of user

Note that home directories are pretty much a thing of the past. Folder
redirection for My Documents, Application Data, Desktop (& even Start Menu
if you wish) can be done to

\\server\users$\%username%\My Documents
\\server\users$\%username%\Desktop
\\server\users$\%username%\Application Data

(etc)

And you can map a drive in your login script for the users' specific My Docs
folder if you want, although a mapped drive isn't necessary.

You don't need to define a home directory path for this at all.


>
> I used to have a Microsoft document or KB stating what ntfs and share
> permissions I needed to set on the user$ folder for everything to
> work such as offline files etc, I have tried searching for it, can
> anyone help?

This one?
http://support.microsoft.com/kb/274443
>
> Also currently we have an issue with our existing home folder server
> in that we as admins cannot get into the folders unless we take
> ownership... I have seen there seems to be to ways around this, set
> the user$ folder to have an explicit administrator full control
> permission, which gets inherited, or by using a GPO? recommendations?

Make sure the NTFS permissions are correct as per the above doc, and then in
your folder redirection GPO,make sure you have not ticked the box to grant
the user exclusive rights to the folder(s). It won't correct your existing
settings (you'd need to do that manually or via script) though.