Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm trying (without success) to get help with setting up User Home Folder\Directory permissions on server 2012. What I would like to know is what permission do I need so that each user can access his/her files etc but CANNOT view\access other users home folders.

I have already created folders on the server called "UserProfiles" and "UserData". When a user logs on for the first time, their home folder would be created as a subfolder in the "UserData" folder i.e. \server01\UserData$\%username%

share|improve this question

Unless something drastic has changed in 2012, the following should work.

Set the share on the server (in your case UserData$) with Full Control for the Admins/Domain Admins, and Everyone as "Change and Read".

On the NTFS folder "UserData" set the permissions explicit without inheritance and only grant Domain Admins Full control, along with anyone outside of Domain Admins that needs to see all folders.

Then when you create the user in AD and set their home folder that subfolder %username% will automically be granted Full Control for that user. Since they can traverse the UserData folder to map a drive to \server01\UserData$\%username% they get access to only that folder. Mapping a drive to \server01\UserData$ will be useless for them.

That's how we've always set ours up over the years.

Now with 2012 you can easily enable ABE where the users only see folders they have rights to, but this isn't even necessary if you do the above.

share|improve this answer
Yeah, that tried and true method still works in Server 2012. – HopelessN00b Dec 20 '12 at 14:55
Many thanks TheCleaner & HopelessNoob for your speedy replies. I'm a complete noob too and trying to get to grips with this using a virtual servers2012 on VBox. Will let you know how i get on. – LondonGuy Dec 20 '12 at 15:05
From what I can see, the subfolder %username% can be deleted by the user (since he has full control). Is there any way to prevent users from deleting their own home folders? – Reyhn Dec 8 '15 at 19:49

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.