Hiding directories in Windows 2000

[TysonG]

Hello all.

I need to change my home directory structure to meet a new security policy. Currently, we run a home dir structure like this:

H:\homedirs\user1
H:\homedirs\user2
H:\homedirs\user3
etc

Obviously, user1 does not have access to H:\homedirs\user2 or H:\homedirs\user3, but user1 can navigate to H:\homedirs and see that the user2 and user3 folder do exist. This has to be changed. I need a way for
user1 to navigate to H:\homedirs and not even be able to see the user2 and user3 folder.

I have tried removing all rights to H:\homedirs, except for the "traverse directory" right. This allows the user to access their homedir, while getting an "access denied" to h:\homedirs. This has been deemed unacceptable, becuase the user needs to be able to get to their homedir by navigation in a common dialog box. For the novell people out there, I am basically looking for a way to mimic the "file scan" right in Novell.

Thanks much!

 

[GlenJohnson]

You can't safely hide the folders, but you can limit access with Windows security. It's the easiest and best way to handle this. (I've tried to do the same thing, and I found a method, but a gent that was on the team that wrote W2K pro and server told me I shouldn't use the method I found. Extremely dangerous to the network.) Use security and make sure nobody can access the folders. Then users can create all the folders within there home directory they want. Good luck.

Glen A. Johnson
"Fall seven times, stand up eight."
Proverb

Want to get great answers to your Tek-Tips questions? Have a look at FAQ219-2884

 

[darranagl]

Just a suggestion but have you tried to put a $ at the end of the share name eg Home folds are called "H$".

Shares with a $ are hidden from view.

New Zealand, a great place to live.

http://www.southland.org.nz

tokala@orcon.net.nz

 

[GlenJohnson]

The $ sign is the option I was told not to use. I was told by the person that helped create W2K pro and server that he wished the $ had never been created for use in programming. It will work, but you're better off using security and not the $. (FYI, it does work, but is not used in security. MS does not talk about it. It's used for MS special hidden folders and files.) Good luck.

Glen A. Johnson
"Fall seven times, stand up eight."
Proverb

Want to get great answers to your Tek-Tips questions? Have a look at FAQ219-2884

 

[Trackhappy]

We map the users home directory to a sub-folder in a share ie: "\\server\share\folder". We use the $ for the share, but it should work just as well without. Note that this was not possible with earlier verions, I think it came about with W2K.
Hope it helps.

 

[alexs0628]

I'm also switching now from Novell to a w2k server, and the Microsoft way is annoying.

With the W2k users, I mapped h:\server\home\user and the user will only see that specific folder.

But all the Windows 98 users must be mapped h:\server\home. The w98 user will see all the home folders. Just give the share right to the appropriate user per folder. Your stuck with this view unless you upgrade your w98 users to w2k or XP.

 

[TysonG]

Thanks all. That's pretty much what I thought.

I went with the mapped drive solution as all out clients our w2k.