Sonntag, 10. Juni 2012 08:06We have Windows 2008 64 Bot Ent . It has ADS , DNS GPO it is working fine . ( Sharing Folder SYSvol and Netlogon ) can i stop this two sharing folder ? Bcoz some people to copy his files to this Two folder . is is any distributed to domain controller ?
Sonntag, 10. Juni 2012 09:25
These two shares are default shares in any DC.Instead of stopping shares restrict it to authenticated users.Generally everyone have read only access to these folders unless and otherwise user have special permissions.
I recommend you check this thread for setting up permissions http://social.technet.microsoft.com/Forums/en-US/winserverDS/thread/d54c2e41-f827-4db3-8956-1b3d15f5a076
Regards, Ravikumar P
- Als Antwort markiert K_evin ZhuMicrosoft Contingent Staff, Moderator Donnerstag, 14. Juni 2012 05:51
Sonntag, 10. Juni 2012 09:26Another useful link for you http://www.computing.net/answers/windows-2003/netlogon-and-sysvol-shares/4629.html
Regards, Ravikumar P
- Als Antwort markiert Suriya Subash Donnerstag, 14. Juni 2012 07:13
Sonntag, 10. Juni 2012 10:41
The SYSVOL share contains W2K software distribution files, scripts, and ADM templates as well as the Group Policy Template. An NT administrator would consider Sysvol to be W2K's version of NETLOGON. Replication in W2K is handled by the File Replication Service to keep the SYSVOL share synched between W2K domain controllers. In fact, W2K creates the NETLOGON share for down-level clients, Win9x and Windows NT, under the SYSVOL structure.
SYSVOL is shared under %systemroot%\Sysvol\sysvol and NETLOGON is shared under %systemroot%\Sysvol\sysvol\domain\Scripts.
Mohamed Abd Elhamid Abd Elaziz Microsoft System Administrator My blog: http://Mabdelhamid.wordpress.com/
Sonntag, 10. Juni 2012 11:18
"We have Windows 2008 64 Bot Ent . It has ADS , DNS GPO it is working fine . ( Sharing Folder SYSvol and Netlogon ) can i stop this two sharing folder ? "
Stop them and your domain is down, these share are the most important shares you have in a domain and they MUST be available always.
Domain users by default can read data in the folder so which security groups are the people member of that are copying data into the folder?
MVP, MCP, MCTS
Microsoft MVP - Directory Services
My Blog: http://msmvps.com/blogs/mweber/
Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
Sonntag, 10. Juni 2012 12:47
By Default this will be shared to all users, its nothing but a folder used by server puposes
SysVol : This Folder contains all DNS information and Replication if there is any, And All Group Policy Objects are stored onli in this folder ! yeah this is read only may be some users can see the contents and for some users it may show as Empty folder am not sure
Netlogon : All the logan Scripts are found Under Here make ur default "Logon.bat" script put it in this netlogon folder go back to AD users and Computer under ur domain Find Somethinf called "Foreign security policy" there u go configure ur own logon script ,
Especialy this folder is in share means u can identify that its one of the domain controller or GC
Where as Sysvol folder can be found in all member servers !
If the two perverts doing some File transfer means add two users and deny permission to them ,do that by right clicking prop of that folder(sysvol or netlogon), it will kick off thier datas on to them !
If you stop sharing means eventuallly the datas will not propogate to ur other DC ! Glad you asked !!
Whoomp ! Whoomp !
Face the fact tat we all have plenty to learn about this field. Deal wit the failures, use tem as motivation, learn something new everyday. Claiming false credentials & phantom skillsets will not get you far, especially when 63248651487512645876531864 people in the universe know how 2 use the internet
- Als Antwort markiert K_evin ZhuMicrosoft Contingent Staff, Moderator Donnerstag, 14. Juni 2012 05:52
Donnerstag, 14. Juni 2012 05:51ModeratorHi,
As this thread has been quiet for a while, we will mark it as ‘Answered’ as the information provided should be helpful. If you need further help, please feel free to reply this post directly so we will be notified to follow it up. You can also choose to unmark the answer as you wish.
BTW, we’d love to hear your feedback about the solution. By sharing your experience you can help other community members facing similar problems. Thanks for your understanding and efforts.
TechNet Community Support
- Als Antwort markiert Suriya Subash Donnerstag, 14. Juni 2012 07:21
Donnerstag, 14. Juni 2012 07:10
Many People are coping that folder how can i stop Boss