Hiding contents (or even complete folder/vol) of NETLOGON & SYSVOL

[tookawhile]

How can I hide a folder's contents, so that domain users cannot see them?

I want to hide the contents of the NETLOGON and SYSVOL - they are not shared in the sense that the hand icon is displayed for their respective folders, but when I browse the network the SYSVOL and NETLOGON folders are displayed - which is confusing me as a default user can see them and list contents. Still require the privilages to execute the scripts, etc to remain.

Is this possible?

 

[ncotton]

In the right click on the folder > properties > security > Advanced > Add > add the security group membership for users that you dont want to view this folders contents > select "Deny" for the "List Folder / Read Data" > ok xnumber of times.

Hope this Helps.

Neil J Cotton
njc Information Systems
Systems Consultant

 

[tookawhile]

When I select 'Deny' for 'List Folder' and 'Read Data' the 'Read & Execute' permission becomes denied also. Am I correct in thinking the SYSVOL will need execute permission?

This also applies to NETLOGON

I would like it still to be executable (I think) but just not viewable - doesn't seem to allow that - do I use 'Special Permissions'?

 

[ncotton]

Errr...Actually, Im not 100% sure, because i think the SysVol is processed on the client by the system account.... I cant promise though.

Hope this Helps.

Neil J Cotton
njc Information Systems
Systems Consultant