NTFS permissions - Only access to folders created by the user himself

Hi,
I once came by an TechNet article explaining how to set up the NTFS permission on a shared folder, so the users would have rights to create a subfolder, and then only have access to this folder, and none of the co-existing folders on the same level, created
by similiar users.
So in details, I have shared a folder called backup$, where the users needs access to create their own subfolder (will be done automatically by a script). And in case they would need to browse their way to the full path, I need to make sure, they won't be
able to access folders created by other users.
Any help is much appreciated.
Martin Bengtsson | www.imab.dk

Hi,
I am not clear what are the rights you will set through the script for each sub-folder. You can verify, your settings using
Effective Permission tool.
You can more about Effective Permissions from the below URLs.
http://technet.microsoft.com/en-us/library/cc772184.aspx
http://technet.microsoft.com/en-us/magazine/2006.01.howitworksntfs.aspx
<hr/>
<br/>
Regards,<br/>
Jack<br/>
<a href=http://www.jijitechnologies.com>JiJi Technologies</a>
I'm sorry if my question is not clear. I'm looking for the correct NTFS permissions to set on the shared folder. No permissions are being set in the script.
Martin Bengtsson | www.imab.dk

Similar Messages

"Read items that were created by the user" and inconsistent permissions

Hi!
I have enabled the option "Read items that were created by the user" and "Create items and edit items that were created by the user" in the advanced settings of a list. Indeed when a user creates an item in that list, that item is visible
only by that account and other accounts cannot see it.
However when the user opens the "Shared With" dialog he/she sees all users there, giving him/her the impression that the item is visible to everyone! Why is that? This is very confusing since this "Shared With" feature is the only way
for a user to tell who can see an item.

Let it make it more clear. User A creates Item 1. Users B creates Item 2. When User A sees the contents of the list he sees Item 1 only. When User B sees the contents of the list he sees Item 2 only. As expected.
The problem is that if User A selects Item 1 and then clicks on 'Shared With' button on the ribbon, he will get pop up that indicates that the Item 1 is Shared with User B. Which is not true since User B cannot see the item. So User A wrongly assumes
that Item 1 is Shared with User B!
Dimitris Papadimitriou, Software Development Professional

How to Setup User Folders Automatically when the user is being created

Hi All
I am setting up a new Windows Server 2012 R2 Standard Edition with Full/GUI install.
Q.1. Is there a way to create User Folders on Data Drive (D: Drive - OS is installed on C) automatically as I create Users?
Q.2. Additionally can these folders be assigned appropriate permissions automatically?
Q.3.What is the best approach If appropirate permissions are not assigned automatically. I have drive D: as a share with Full permissions to all. Is there a better way.
Thanks
Respectfully
Jamal

Hi,
Not sure you mean local computers or domain environment. In domain, we can create folder redirection GPO.
With this policy we can redirect folder to a shared folder or another local drive.
For your information:
Configuring Folder Redirection
http://technet.microsoft.com/library/cc786749.aspx
Security Recommendations for Folder Redirection
http://msdn.microsoft.com/en-us/library/cc736916(v=ws.10).aspx
Hope this helps.

HT4314 i have 2 game center account with 1 apple id but it will only access one account. it says the other id is used but i cant change . help.

I have a game center account that has 2 accounts in the same apple id. the problem is i can only access one account. when i try to type in for the second account it says already taken. How do i change to the 2nd account with the same apple id? Please help.

that's the issue, you bought the OS online so Donald is right, it is being mailed to you. post the URL where you bought it.
the 'app store' is an application running on OSX itself where you can DL software.
so, you have to wait for mountain lion to arrive.
if you want to get a clean OS on your machine now, do this
reboot holding down command/option/R (hoping your machine supports this)
open disk utility, erase your HD so you have a single mac journaled partition
choose install OSX on this HD
let it run. from what you said, you will be back on lion.

Read-only access (hide a portion of the config)

Is there a way to alloww read-only access to only a portion of the config. I have customers who are requesting read-only access, but i don't want them seeing portions of the config.
Any help or suggestions would be greatly appreciated. Thanks

If they have an enable level login they will be able to see the whole configuration (absent encrypted passwords assuming you're using service password-encryption).
You can make logins more granular and prevent customers from having, say, the ability to execute arbitrary commands such as "show run". You could, for instance setup a given user to only be alllowed to execute "show interface status" etc. NX-OS has this ability pretty much 'baked-in'. For IOS-based systems, a bit more work is required.
Here is a guide for how to do it if you use TACACS for AAA:
https://supportforums.cisco.com/docs/DOC-15765
If you're using local authentication, you can do similar things using either privilege levels or cli views:
http://www.cisco.com/en/US/docs/ios/12_2t/12_2t13/feature/guide/ftprienh.html
http://www.cisco.com/en/US/docs/ios/12_3t/12_3t7/feature/guide/gtclivws.html
http://www.networkworld.com/community/node/57553
Hope this helps.

Access a portlet created in the WLP admin console

Does anyone know how I can access a portlet directly of URL, that was created in the desktop for WLP 10 ???
Thank you for your time,
John
Edited by: user11167262 on 14-may-2009 8:45

Hi John,
You may also want to take a peek at portlet publishing. Here is a link that talks about rendering a portlet that comes from a desktop:
"Desktop Instance URL Form"
http://download-llnw.oracle.com/docs/cd/E13155_01/wlp/docs103/clientdev/publishing.html#wp1045814

Problems to restrict access to a page when the user belong to more than 1 group

I have realized that Dreamweaver on a coldfusion document only works fine when the user only belongs to a single group, this is because the code supplied by dreamweave when you use the option "Restrict access to a page" at "Server behaviors" it assumes that the user only have one group as you can see on this line created automaticly by dreamweaver:
<cfif MM_Username EQ "" OR MM_UserAuthorization EQ "" OR ListFind("admin",MM_UserAuthorization) EQ 0>
MM_UserAutorization has the value of the field assigned for the list of groups or levels, as you can see it could work if we reverse the parameters of the listfind function but the problem would be if we grant the access to more than one group because the sentence would be like this:
<cfif MM_Username EQ "" OR MM_UserAuthorization EQ "" OR ListFind("Admin,Manager",MM_UserAuthorization) EQ 0>
so both paramethers are lists therefore no user will get access to the page.
I am trying to make a work around to fix this problem but I don't know how to get the name of the page since the Application.cfc so I can validate the access to this page against tables on my database.
Does someone have a work around or a tip how to fix this problem?
Thanks in advance.
AG

Seems like you have a problem with your group names.ctxLdap.modifyAttributes(groupName,member);Ensure that the value of your variable groupName is a a valid distinguished name.
Note that an OU (organizationalUnit) is not a group. You do not add users to OU's, you create users in OU's.

Contact- Service Request - display only SRs that are owned by the user

Hi
Following is the scenario:
User is got access to all Contacts and can see only owned SRs.
User Role - Can Read All Records = YES
User Access Profile
Contact - Readonly
Related Information under Contact:
Service Request - View (Inherit Primary does not appear in the drop down)
When I login, I am able to see all Contacts (as per Role set) and also all SRs related to that Contact.
Problem: Only SRs that are owned by the logged in User should appear. Other user's SR should not be displayed under the contact.
I have seen examples of using "Inherit Primary". This option is not available.
How to achieve this functionality ? (Contact - Read All Records and SRs related to Contact should show only logged in users SRs)

Dear Royston,
Thanks a lot for your response. I tried the steps and it worked fine... though I had trouble getting the parameter values passed... finally sorted out... Thanks.
For others who are trying to pass value through URL:
P0 - indicates the no. of parameters to be passed
P1 - indicates the operator to be used.. in my case it was equal
P2 - field name... get the exact name from the report designer by clicking Formula in the column. (I missed this part and struggled to get the right data for couple of hours)
P3 - the value for which the data to be filtered. (Get this value from the drop down in Custom Web Applet)
https://secure-ausomxapa.crmondemand.com/OnDemand/user/analytics/saw.dll?Go&Path=%2fshared%2fCompany_AAPA-O9O5F1_Shared_Folder%2fBSC%20Visibilty%20test%20report&Options=rfd&Action=Navigate&*P0=1&P1=eq&P2="- Service Request Custom Attributes".TEXT_54&P3=%%%st53_User_Id%%%*
Regards
Suchitra Prakash

Accessing an application without forcing the user to login

I'm a new guy, so please forgive me if I don't have this quite right. I have an inquiry OAF application bolted on to apps R12 that I need to make available to users that do not have user IDs. They're all inside the firewall, so there are no issues with security as long as they can only access this single inquiry. Do I need to mount a separate OC4J server, or can this be done somehow with the existing apps OC4j server? Maybe based on the referring page or something? Can someone point me to anything that will get me started with this? Thanks.

I found this topic in the forum which helps...
How to make a seeded page in EBS bookmarkable
I think it should work but let me check it out

If the iOS app I create emails the user, can the user upgrade from the link in the email or is that against the guidelines?

I want to create an iOS app and for a variety of reasons (subscription, multiplatform, etc) I can't use the Apple app-store payment sytem.
However, if the user creates and account with my iOS app and we then email the user at a later date. Can they upgrade from the link in the email, or is that against Apple policy as well?
Thanks!
Ryan

i am faceing a file download problem too..........
i am protecting jboss application,,,,using apache, and jk....
all work fine except for open a file(word,excel,txt,etc).
Disable the policy domain, everything goes just fine. microsoft file dialogue opens,you can open the file directly, or save it to your computer........
Enable the policy domain,, you can only save the file to your computer(file content is also correct),,,but cannot open it directly.it says the file path could not be found......but if the word/excel application is already running, you can open it fine...
PS:not a computer issue,,,every computers faceing the same problem
any avoice from you is good to me...............thanks very much

Rule to pass the Distribution list created by the user.. or any sap method

Hi Guys,
After completion of material Creation, I need to notify the user(a distribution list is created by user and they have given it to me). I don't know how should i pass the name of my distribution list . Please let me know any method or any rule for the same
Thanks
Mrunal

Hello,
By notify, do you mean emails? Are they being sent outside of SAP? In that case you may want to look at setting up a distribution list in the mail system (eg Outlook) and sending to it. Haven't tried it myself but I've heard it's possible.
regards
Rick Bakker
Hanabi Technology

Files or folders created by one user show as read only for others

We are using Server version 3.2.2, we have a group call production and then we have 9 users plus the administrator account. All users are assigned to the production group. We have a single share called customers and the group "production" has read and write permissions for the share and also for all the underlying folders and files.
Each user logs onto the share with their own username and password. But, when a user creates a new file or folder on the server within the "customers" share, they are assigned read and write permissions and everyone else is assigned "no access".
We then go into the folder on the server and assign the group "production" read and write access and life goes on, but the issue is that we should not have to.
From this description, can anyone tell me what we are doing wrong?

In the sidebar of the Server.app window, select the icon at the top with the name of the server. Then select the Storage tab in the main window pane.
Navigate to the folder in question and select it. From the popup menu at the bottom with a gear icon, select
Edit Permissions...
Verify that the permissions are what they should be, and make changes if necessary. Then, from the same menu, select
Propagate Permissions...
Check all applicable boxes, including Access Control List. If in doubt, check all boxes. Click OK.

How do I access old folders from a different user on Time Machine

Hi
I migrated my old macbook to my new macbook pro with all the files and backed up to time machine.
I then restored my macbook pro using erase and install and started from scratch installing most apps from scratch and restoring some documents and apps from time machine from the old backup of the macbook pro (before erase and install).
I'm now having lots of issues with permissions. I can't save a lot of files in the folders they are already in - e.g. If I try to save a Logic song, it often won't let me save it in the folder it was in.
iWeb is refusing to save anything at all.
I can't seem to get my photos back into iPhoto.
My primary concern at the moment is getting access to documents in Time Machine that were on an old user of the MacBook Pro. My current user is set up from scratch I think (not too sure - I'm getting confused about which user was on which computer).
When I try to open a folder, it says "the folder cannot be accessed because you do not have permission to use its contents".
Any help around these problems would be greatly appreciated.
Thanks
Steve

okstevep wrote:
The reason I did the erase and install in the first place was because I had some kind of bug that was really slowing down my computer. An apple genius said that there were probably some issues with files that was causing this and the best way was to restore and start from scratch.
That's a last resort, but doesn't include a full restore. You have to reinstall all your 3rd-party apps from the original discs; re-enter all your preferences, configuration, and settings; and copy selected data files back. Not a quick or easy procedure, especially if you're not prepared in advance.
If I do a restore from back-up won't the problem come back?
Possibly, but it will get you back where you were, without the permissions problems, and without the confusion about which user account is which, so you can do something constructive.
Is there another way?
Depends. If you haven't done any backups since you erased, you could erase again, install a fresh copy of OSX, then use Setup Assistant to transfer everything else from your backups. Assuming you're running Snow Leopard (per your profile), see Using Setup Assistant on Snow Leopard or Leopard, especially the green box there.
Either way, you may still have to fix the original problem, but there are ways to do that short of the "nuclear" option. I hate to guess with nothing more than "some kind of bug that was really slowing down my computer," but one possibility is a partially-installed or partially-deleted app. Once you get back to where you were, see OSX Log Files, especially the Application Installation or Removal problems section in the blue box

Security group provisining only to show Business rules to the users.

Hi,
Could anybody tell what setting in the Group Provisioning required so that users in that group only see business rules in planning application and not calculation script on the servers. We work on 9.2 env. ?
Thanks,

Yes group is provisioned as planner and have essbase server access... and user in this groups are able to see both business rules and calc script in planning application... but we want to show them only business rules and not calc scripts...

Need to deny access to file manager for the user

Hi
I need to be able to deny access to the file manager, as I dont want my client deleting files. however, for some reason I have to allow him access to this as he needs to be able to upload files through InContext Editor (he needs to link pages to documents that are not on the server so he needs to upload them and to do this, I have to grant him access to file manager). How can I get around this? I dont want to have to reupload his site every time he deletes a file....

Unfortunately it can't be done - access to the file manager allows deleting as well as uploading and at this point that cannot be changed.

NTFS permissions - Only access to folders created by the user himself

Similar Messages

Maybe you are looking for