#121188 - 2004-06-14 02:29 PM
Dilema????
|
dcarr
Getting the hang of it
Registered: 2004-05-10
Posts: 62
|
I have several logical drives on my W2K server, with each drive being assigned to a different departmental function (IT, Marketing, etc).
I would like to create a Home folder for each user within each of the logical drives and also have a main folder for the users to share for shared files and documents.
The problem I am having is that the majority of users use windows 9x.
The issue is if I create a home folder for the user the only way I can access the folder, using Kix, is to share out the folder, and then map to it.
Bearing in mind there anre up to thirty users accessing the logical drive, when the user goes to the drive, although they can see others folders, they cannot access the contents.
Is there any way using kix that I can prevent this so as the user is only able to see their home folder and not everyone elses? I have changed the permissons on the folder but still no luck? Any ideas how this may be achieved?
At present I am using the following:
;Commercial Marketing Private
IF INGROUP ("nw_commercial_marketing_private")
USE N: "\\nw-data-store1\nw2marketing\NW Commercial
Marketing Private"
USE R: "\\nw-data-store1\nw2marketing\"+@userid
ENDIF
|
|
Top
|
|
|
|
|
#121189 - 2004-06-14 02:37 PM
Re: Dilema????
|
Kdyer
KiX Supporter
Registered: 2001-01-03
Posts: 6241
Loc: Tigard, OR
|
Do you mean -
Code:
USE R: "\\nw-data-store1\nw2marketing\"+@userid+"$$"
Note: the addition of the two $ at the end of this. In other words, set this up as an Admin Share..
Kent
|
|
Top
|
|
|
|
|
#121190 - 2004-06-14 02:38 PM
Re: Dilema????
|
dcarr
Getting the hang of it
Registered: 2004-05-10
Posts: 62
|
What is the significance of the two $$???
I have never used these before?
It is not an admin share.
|
|
Top
|
|
|
|
|
#121191 - 2004-06-14 02:41 PM
Re: Dilema????
|
Kdyer
KiX Supporter
Registered: 2001-01-03
Posts: 6241
Loc: Tigard, OR
|
Scratch my last response..
NT4 and 9x will never support deep-mapping.
Code:
USE R: "\\nw-data-store1\"+@userid
HTH,
Kent
Edited by kdyer (2004-06-14 02:42 PM)
|
|
Top
|
|
|
|
|
#121192 - 2004-06-14 02:44 PM
Re: Dilema????
|
dcarr
Getting the hang of it
Registered: 2004-05-10
Posts: 62
|
I thought that was going to be the answer.
What would you suggest would be the best thing to do?
The logical drive is shared between four departments?
The shares are NW_Evnt_Dept, NW_Mktg_Dept.
When events or marketing login they can see each others home directories and shared folders? I have removed some of the permissions but beacause I have shared the folders out to all the users to map to their home folder they are able to see one anothers directories? And it looks a bit of a mess with some forty users home folders located there?
|
|
Top
|
|
|
|
|
#121193 - 2004-06-14 02:49 PM
Re: Dilema????
|
Kdyer
KiX Supporter
Registered: 2001-01-03
Posts: 6241
Loc: Tigard, OR
|
You need to plan this out a bit better..
Make the group drive R:
Make the Home drive H:
Does the private home drive have to be with the groups? Not necessarily. For example, we have a specific home drive server.
Kent
|
|
Top
|
|
|
|
|
#121194 - 2004-06-14 02:53 PM
Re: Dilema????
|
dcarr
Getting the hang of it
Registered: 2004-05-10
Posts: 62
|
The way the server has been built unfortunatley means that this is the case.
The guy who built the server insisted on this kind of setup by function.It works fine on W2K and XP just not on W9x.
How about if I used:
;Commercial Marketing Private
IF INGROUP ("nw_commercial_marketing_private")
USE H: "\\nw-data-store1\nw2marketing\Home\+@userid"
ENDIF
And placed all of the home directories in this folder 'Home'? I do not think this would work would it?
|
|
Top
|
|
|
|
|
#121195 - 2004-06-14 02:59 PM
Re: Dilema????
|
Kdyer
KiX Supporter
Registered: 2001-01-03
Posts: 6241
Loc: Tigard, OR
|
Again, it will fail..
You need to create your share points not as -
Code:
USE H: "\\nw-data-store1\nw2marketing\Home\"+@userid
But rather as -
Code:
USE H: "\\nw-data-store1\"+@userid
It maybe messy, but you really need to do this for each group that has NT4/9x systems. You can ROBOCOPY these User folders to a new location where you don't have to deal with the group stuff too. Look at the Security switches for ROBOCOPY and/or you can use XACLs from the Resource kit as well for the clean-up of this.
Kent
|
|
Top
|
|
|
|
|
#121196 - 2004-06-14 03:54 PM
Re: Dilema????
|
Radimus
Moderator
Registered: 2000-01-06
Posts: 5187
Loc: Tampa, FL
|
no...
I have almost the identical setup here.
your win9x users MUST have their home folder shared... share as username$ (the $ sign means it is a hidden share)
then
if @inwin=2
use h: '\\server\+@userid+'$'
else
use h: '\\server\share\home\'+@userid
endif
then over the course of time as you replace the win9x machines you can remove the users share
|
|
Top
|
|
|
|
|
#121198 - 2004-06-14 09:26 PM
Re: Dilema????
|
dcarr
Getting the hang of it
Registered: 2004-05-10
Posts: 62
|
So in using the $ sign on the users accounts nobody aside from the user will be able to see the share?
Or am I going wide of the mark here?
|
|
Top
|
|
|
|
|
#121200 - 2004-06-15 10:03 AM
Re: Dilema????
|
dcarr
Getting the hang of it
Registered: 2004-05-10
Posts: 62
|
But is there a way from the login script that you can hide:
a) the home folders of other users from others (we have a logical drive with all home directories on it)
b) the shared folders from users who do not have access to the main shared folders (if not in group hide)???
|
|
Top
|
|
|
|
#121201 - 2004-06-15 02:11 PM
Re: Dilema????
|
Kdyer
KiX Supporter
Registered: 2001-01-03
Posts: 6241
Loc: Tigard, OR
|
Quote:
a) the home folders of other users from others (we have a logical drive with all home directories on it)
Isn't that the purpose of an Admin share? That is a share that is created with a $ on the end of it..
Quote:
b) the shared folders from users who do not have access to the main shared folders (if not in group hide)???
Isn't that the purpose of NT-based security? If you apply permissions to a folder (that is visible to everybody) and a person comes along and tries to open the folder that is a member of the group, he/she should have that mapped as a drive. Conversely, if a person comes along and sees the same folder that is not a member of the group that does not have access, they will get an "access denied". That means they cannot get into the folder.
Do not take this the wrong way.. You appear to need training with regard to network Administration. You should ask your Management about getting trained if you are going to be adminstering scripts and understanding how this stuff comes together.
Please visit - http://www.microsoft.com/training
HTH,
Kent
|
|
Top
|
|
|
|
Moderator: Glenn Barnas, NTDOC, Arend_, Jochen, Radimus, Allen, ShaneEP, Ruud van Velsen, Mart
|
0 registered
and 1471 anonymous users online.
|
|
|
