Ownership of Profiles

  • Thread starter Thread starter Ian Henderson
  • Start date Start date
I

Ian Henderson

Hi.

We recently had a problem with the Sasser worm, which highlighted a few
problems with our anti-virus provision (see, every cloud does have a silver
lining).

One of the things we found was that our anti-virus software was unable to
scan the profile folders on the server, because the Administrator account
did not have sufficient rights to those folders.

As a result of this, what I did was to change the rights to the profiles
folder itself, so that Administrator was set as the owner of both it, and
all subsequent sub-folders. However, in doing so, I granted everyone the
right of access to every profile. (Oops!).

Now, as a result, we've got a network where everyone can see everyone else's
profile, which is obviously not right. Therefore, I'm going to have to go
through each folder manually, remove the Everyone group entirely, and add in
the correct user, with Full Control privileges.

Since we've got over 300 users, is there a way of automatically setting each
folder, so that only the Administrator and the relevant user can access each
folder, without having to go through each profile in turn?

I hope someone can help me, or I'm in for a very long shift!


TIA


Ian Henderson
 
HI,

Thougth i would comment abou this, cause im having a
similar problem with roaming profiles all over the
network. Sometimes the profile will load anywhere on the
network, and sometimes it will not very strange. I think
its just 2000 is full of annoying bugs

Jason
 
Back
Top