Full Control. This will allow you to fully control any and all users to the precise rights that you want to - all in NTFS.
Share Permissions are a throw-back to pre-NTFS days. It is best to avoid them completely. On Jan 25, 2008 2:45 PM, Matthew W. Ross <[EMAIL PROTECTED]> wrote: > > Full Control, or just Write? > > Reason I ask it because Full Control includes the power to change > permissions if the NTFS permissions allow it, correct? I want to avoid users > from granting permissions of their own folders to other users. > > Otherwise, yes. that would be simple. > > --Matt Ross > ________________________________ > From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED] > > To: NT System Admin Issues [mailto:[EMAIL PROTECTED] > Sent: Fri, 25 Jan 2008 11:39:43 -0800 > Subject: Re: Active Directory User and Home Folder creation problems. FIXED. > > > > Moving forward, I would recommend that you keep your share permissions > open to everyone full control, and apply your ACLs to NTFS. > > > On Jan 25, 2008 1:53 PM, Matthew W. Ross <[EMAIL PROTECTED]> wrote: > > > > Thanks for the link to the KB. Most useful stuff. > > > > Student Admins was/is a security group. > > > > Whatever the problem, It's fixed now. I explicitly gave the user > permissions > > to the Share and Folder. That seemed to have fixed the problem. > > > > Thanks for all your help. > > > > --Matt Ross > > ________________________________ > > From: Miller Bonnie L. [mailto:[EMAIL PROTECTED] > > To: NT System Admin Issues [mailto:[EMAIL PROTECTED] > > Sent: Fri, 25 Jan 2008 10:24:56 -0800 > > Subject: RE: Active Directory User and Home Folder creation problems. > > > > > > > > > > Have you seen this? > > > > http://support.microsoft.com/kb/555046/en-us > > > > > > > > Also, make sure your "student admins" group is a security group and not a > > distribution group. > > > > > > > > -Bonnie > > > > > > > > > > From: Matthew W. Ross [mailto:[EMAIL PROTECTED] > > Sent: Friday, January 25, 2008 9:52 AM > > To: NT System Admin Issues > > Subject: Re: Active Directory User and Home Folder creation problems. > > > > > > > > > > Okay, something just came up as a question... > > > > As the user who I want to have control, I am trying to manually set the > > permissions... and the "add" button is greyed out. Somehow this user > doesn't > > have permissions. > > > > But I don't see how she doesn't: She's a member of the Student Admins > group, > > which has Full Control of the Share and the root of the share's folder... > > > > I'm going to try to set her manually as full access. Why wouldn't the > Group > > propigate her permissions correctly? Arg! > > > > --Matt Ross > > ________________________________ > > > > > > From: Matthew W. Ross [mailto:[EMAIL PROTECTED] > > To: NT System Admin Issues [mailto:[EMAIL PROTECTED] > > Sent: Fri, 25 Jan 2008 09:38:40 -0800 > > Subject: Re: Active Directory User and Home Folder creation problems. > > > > > > Just checked that... > > > > Everyone had "Change", while Administrators had "Full Control". I just > added > > the Student Admins to the list, and gave that group "Full Control" as > well. > > > > So, I'm testing this with her account... I logged off, logged back in as > > her, tried to create an account again... Same thing: Can create the > accout. > > Try to set the profile and home path and it complains it can't create the > > home folder (although it does) and does not set permissions correctly on > the > > folder. > > > > *stumped* > > > > --Matt Ross > > ________________________________ > > > > > > From: Jon Harris [mailto:[EMAIL PROTECTED] > > To: NT System Admin Issues [mailto:[EMAIL PROTECTED] > > Sent: Fri, 25 Jan 2008 09:15:39 -0800 > > Subject: Re: Active Directory User and Home Folder creation problems. > > > > > > > > Have you checked the Share rights? > > > > > > > > > > > > Jon > > > > > > On Jan 25, 2008 12:07 PM, Matthew W. Ross <[EMAIL PROTECTED]> > wrote: > > > > > > > > Greetings, List. > > > > I have delegated control of a part of Active Directory to a user in my > > School District. She is trying to create students as they come in. > > > > When she creates the student, she enters user's name, username and > password > > and finishes making the account. Account creates successfully. Then she > > edits the user to set the Profile and Home Folder path. After editing the > > path, she hits "OK" and the following error appears: > > > > The \\Servername\Share\username home folder was not created because you do > > not have create access on the server. The user account has been updated > with > > the new home folder value but you must create the directory manually after > > obtaining the required access rights. > > > > What's interesting is that she _does_ have create access on the server. > She > > is part of a StudentAdmins group, which has full control of the root of > the > > share. Also, The user's folder was created by the Active Directory Users > and > > Computers plugin, but the permissions are not set correctly. > > > > Any idea on why this doesn't just work as expected? > > > > --Matt Ross > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > ME2 > > ~ Upgrade to Next Generation Antispam/Antivirus with Ninja! ~ > ~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm> ~ > > > > > > > > > > > > > > > -- ME2 ~ Upgrade to Next Generation Antispam/Antivirus with Ninja! ~ ~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm> ~
