I am looking for a way to acomplish the following:
Currently users have home drives mapped via AD profile as follow: \\fileserver\users\username
However if once a user was able to access \\fileserver\users and view everyones folder, but had no access to them.
This is not ideal since we have people saving important stuff to on their drives. How can I restrict users permissions and views only to THEIR home drives?
I also saw this solution, but not sure if it would apply to me:
Share level permissions - Everyone full permission and remove all others
On the file/folder level set the following:
Authenticated users special permissions on the root of the \\server\homeshare\ to
Check the boxes next to the following:
- Traverse folder / execute file
- List Folder / read data
- Read attributes
- Read extended attributes / List item
All other boxed leave unchecked and make sure you apply "This Folder Only"
Domain Adminsfull rights and apply “this folder, subfolders, and files”
This will block the users from accessing other user home directories.
When you create the new user and set the home directory it will create the folder for you with the correct permissions.