Folder Redirection Security settings....

[Mrpush]

Hello,

I thought I had this licked, but then an audit proved otherwise.

I have setup folder redirection security and share permissions as instructed
here:

http://technet.microsoft.com/en-us/library...853(WS.10).aspx

These settings open up all my users redirection folders to all other
users!!!!!

Is this a mistake?

FULL security group share permissions, gives all user all access to all
other user files.

Am I missing something here?

Thanks,

Mark

 

[Ace Fekay [MCT]]

"Mrpush" wrote in message
news:FD834B13-EDEC-48E0-AB28-85795BC38FDE@microsoft.com...
> Hello,
>
> I thought I had this licked, but then an audit proved otherwise.
>
> I have setup folder redirection security and share permissions as
> instructed
> here:
>
> http://technet.microsoft.com/en-us/library...853(WS.10).aspx
>
> These settings open up all my users redirection folders to all other
> users!!!!!
>
> Is this a mistake?
>
> FULL security group share permissions, gives all user all access to all
> other user files.
>
> Am I missing something here?
>
> Thanks,
>
> Mark
>
>


It's possible you've misunderstood the permissions. Each individual's folder
must allow the individual Full Control in the Share and the NTFS
permissions. If you have one common shared folder, that folder will need
Authenticated Users Full Control on the share. That in conjunction with each
user's child folder only having their owner as full control, will only allow
the user to see their own folder and none of the others.

What I do is individually share the specific user's folder with a dollar
sign ($) to hide it, and only provide them full control on their own folder.
Read more in the link below to see what I mean and how I normally set it up.

Folder Redirection
http://msmvps.com/blogs/acefekay/archive/2...edirection.aspx


--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among
responding engineers, and to help others benefit from your resolution.

Ace Fekay, MCT, MCTS 2008, MCTS Exchange, MCSE, MCSA 2003 & 2000, MCSA
Messaging
Microsoft Certified Trainer

For urgent issues, please contact Microsoft PSS directly. Please check
http://support.microsoft.com for regional support phone numbers.

 

[Mrpush]

Ace,

Thanks for the help. I took you advice. However, I then realized that the
Ws that I was logged into as a test user, was logged in prior with an account
with full access to the share.

Basically, from any user account, if you goto network neighboorhood, you can
log into a share if you provide username and password to that resource when
clicked.

If you check "remember password", current logins are given access to the
shares.

How do I clear these "remembered" login and passwords to shares?

It appear my audit was not a true audit as when I logged in as other user on
other WS, they could not see the same shares.

Thanks much,

Mark

"Ace Fekay [MCT]" wrote:

> "Mrpush" wrote in message
> news:FD834B13-EDEC-48E0-AB28-85795BC38FDE@microsoft.com...
> > Hello,
> >
> > I thought I had this licked, but then an audit proved otherwise.
> >
> > I have setup folder redirection security and share permissions as
> > instructed
> > here:
> >
> > http://technet.microsoft.com/en-us/library...853(WS.10).aspx
> >
> > These settings open up all my users redirection folders to all other
> > users!!!!!
> >
> > Is this a mistake?
> >
> > FULL security group share permissions, gives all user all access to all
> > other user files.
> >
> > Am I missing something here?
> >
> > Thanks,
> >
> > Mark
> >
> >
>
>
> It's possible you've misunderstood the permissions. Each individual's folder
> must allow the individual Full Control in the Share and the NTFS
> permissions. If you have one common shared folder, that folder will need
> Authenticated Users Full Control on the share. That in conjunction with each
> user's child folder only having their owner as full control, will only allow
> the user to see their own folder and none of the others.
>
> What I do is individually share the specific user's folder with a dollar
> sign ($) to hide it, and only provide them full control on their own folder.
> Read more in the link below to see what I mean and how I normally set it up.
>
> Folder Redirection
> http://msmvps.com/blogs/acefekay/archive/2...edirection.aspx
>
>
> --
> Ace
>
> This posting is provided "AS-IS" with no warranties or guarantees and
> confers no rights.
>
> Please reply back to the newsgroup or forum for collaboration benefit among
> responding engineers, and to help others benefit from your resolution.
>
> Ace Fekay, MCT, MCTS 2008, MCTS Exchange, MCSE, MCSA 2003 & 2000, MCSA
> Messaging
> Microsoft Certified Trainer
>
> For urgent issues, please contact Microsoft PSS directly. Please check
> http://support.microsoft.com for regional support phone numbers.
>
>
>
>

 

[Ace Fekay [MCT]]

"Mrpush" wrote in message
news:E6667BEA-6717-45A5-BEC5-57BFD63D3A5C@microsoft.com...
> Ace,
>
> Thanks for the help. I took you advice. However, I then realized that the
> Ws that I was logged into as a test user, was logged in prior with an
> account
> with full access to the share.
>
> Basically, from any user account, if you goto network neighboorhood, you
> can
> log into a share if you provide username and password to that resource
> when
> clicked.
>
> If you check "remember password", current logins are given access to the
> shares.
>
> How do I clear these "remembered" login and passwords to shares?
>
> It appear my audit was not a true audit as when I logged in as other user
> on
> other WS, they could not see the same shares.
>
> Thanks much,
>
> Mark
>


To remove Windows stored passwords, run the following. This works on XP,
Vista and I believe on Windows 7, but I haven't tested it on 7 yet.

rundll32.exe keymgr.dll, KRShowKeyMgr

Let me know how you make out.

Ace

 

[Meinolf Weber [MVP-DS]]

Hello Ace Fekay [MCT],

If you run the command on Windows 7, it will open the "Stored user names
and password" window.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> "Mrpush" wrote in message
> news:E6667BEA-6717-45A5-BEC5-57BFD63D3A5C@microsoft.com...
>
>> Ace,
>>
>> Thanks for the help. I took you advice. However, I then realized
>> that the
>> Ws that I was logged into as a test user, was logged in prior with an
>> account
>> with full access to the share.
>> Basically, from any user account, if you goto network neighboorhood,
>> you
>> can
>> log into a share if you provide username and password to that
>> resource
>> when
>> clicked.
>> If you check "remember password", current logins are given access to
>> the shares.
>>
>> How do I clear these "remembered" login and passwords to shares?
>>
>> It appear my audit was not a true audit as when I logged in as other
>> user
>> on
>> other WS, they could not see the same shares.
>> Thanks much,
>>
>> Mark
>>
> To remove Windows stored passwords, run the following. This works on
> XP, Vista and I believe on Windows 7, but I haven't tested it on 7
> yet.
>
> rundll32.exe keymgr.dll, KRShowKeyMgr
>
> Let me know how you make out.
>
> Ace
>

 

[Ace Fekay [MCT]]

"Meinolf Weber [MVP-DS]" wrote in message
news:6cb2911d80ea8cc218a041c34f0@msnews.microsoft.com...

Cool! then it works in 7, too!

Thanks, Meinolf!



> Hello Ace Fekay [MCT],
>
> If you run the command on Windows 7, it will open the "Stored user names
> and password" window.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> "Mrpush" wrote in message
>> news:E6667BEA-6717-45A5-BEC5-57BFD63D3A5C@microsoft.com...
>>
>>> Ace,
>>>
>>> Thanks for the help. I took you advice. However, I then realized
>>> that the
>>> Ws that I was logged into as a test user, was logged in prior with an
>>> account
>>> with full access to the share.
>>> Basically, from any user account, if you goto network neighboorhood,
>>> you
>>> can
>>> log into a share if you provide username and password to that
>>> resource
>>> when
>>> clicked.
>>> If you check "remember password", current logins are given access to
>>> the shares.
>>>
>>> How do I clear these "remembered" login and passwords to shares?
>>>
>>> It appear my audit was not a true audit as when I logged in as other
>>> user
>>> on
>>> other WS, they could not see the same shares.
>>> Thanks much,
>>>
>>> Mark
>>>
>> To remove Windows stored passwords, run the following. This works on
>> XP, Vista and I believe on Windows 7, but I haven't tested it on 7
>> yet.
>>
>> rundll32.exe keymgr.dll, KRShowKeyMgr
>>
>> Let me know how you make out.
>>
>> Ace
>>
>
>

 

[Meinolf Weber [MVP-DS]]

Hello Ace Fekay [MCT],

You're always welcome.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> "Meinolf Weber [MVP-DS]" wrote in message
> news:6cb2911d80ea8cc218a041c34f0@msnews.microsoft.com...
>
> Cool! then it works in 7, too!
>
> Thanks, Meinolf!
>
>> Hello Ace Fekay [MCT],
>>
>> If you run the command on Windows 7, it will open the "Stored user
>> names and password" window.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> "Mrpush" wrote in message
>>> news:E6667BEA-6717-45A5-BEC5-57BFD63D3A5C@microsoft.com...
>>>
>>>> Ace,
>>>>
>>>> Thanks for the help. I took you advice. However, I then realized
>>>> that the
>>>> Ws that I was logged into as a test user, was logged in prior with
>>>> an
>>>> account
>>>> with full access to the share.
>>>> Basically, from any user account, if you goto network
>>>> neighboorhood,
>>>> you
>>>> can
>>>> log into a share if you provide username and password to that
>>>> resource
>>>> when
>>>> clicked.
>>>> If you check "remember password", current logins are given access
>>>> to
>>>> the shares.
>>>> How do I clear these "remembered" login and passwords to shares?
>>>>
>>>> It appear my audit was not a true audit as when I logged in as
>>>> other
>>>> user
>>>> on
>>>> other WS, they could not see the same shares.
>>>> Thanks much,
>>>> Mark
>>>>
>>> To remove Windows stored passwords, run the following. This works on
>>> XP, Vista and I believe on Windows 7, but I haven't tested it on 7
>>> yet.
>>>
>>> rundll32.exe keymgr.dll, KRShowKeyMgr
>>>
>>> Let me know how you make out.
>>>
>>> Ace
>>>

 

[Mrpush]

Guys,

Great tip, I'll try it.

I hope you guys know how much we appreciate your help on these groups.

Thanks very much,

Mark

"Ace Fekay [MCT]" wrote:

> "Mrpush" wrote in message
> news:E6667BEA-6717-45A5-BEC5-57BFD63D3A5C@microsoft.com...
> > Ace,
> >
> > Thanks for the help. I took you advice. However, I then realized that the
> > Ws that I was logged into as a test user, was logged in prior with an
> > account
> > with full access to the share.
> >
> > Basically, from any user account, if you goto network neighboorhood, you
> > can
> > log into a share if you provide username and password to that resource
> > when
> > clicked.
> >
> > If you check "remember password", current logins are given access to the
> > shares.
> >
> > How do I clear these "remembered" login and passwords to shares?
> >
> > It appear my audit was not a true audit as when I logged in as other user
> > on
> > other WS, they could not see the same shares.
> >
> > Thanks much,
> >
> > Mark
> >
>
>
> To remove Windows stored passwords, run the following. This works on XP,
> Vista and I believe on Windows 7, but I haven't tested it on 7 yet.
>
> rundll32.exe keymgr.dll, KRShowKeyMgr
>
> Let me know how you make out.
>
> Ace
>
>
>
> .
>

 

[Ace Fekay [MCT]]

"Mrpush" wrote in message
news:B4E49D1A-1D49-4E03-80DB-739BAB5C2C8A@microsoft.com...
> Guys,
>
> Great tip, I'll try it.
>
> I hope you guys know how much we appreciate your help on these groups.
>
> Thanks very much,
>
> Mark
>

It's a pleasure to help! Glad we were able to help.

Ace