Does anyone use Home Folders that are NOT private?
-
Monday, August 20, 2012 5:15 PM
Just wondering if any admins run a server environment in which users home folders are NOT private but are shared amongst departments or the entire organization?
My understanding is that having users home folder accessible only to themselves and administrators is standard practice. I find myself having to defend this practice.
Does anyone have any experience with this?
All Replies
-
Monday, August 20, 2012 9:23 PM
I've actually seen it both ways. I was a "consultant" and had 2-3 of my clients that the home folders were visible to everyone on the domain. But, almost always the home folders have been only accessbile to the user and the admins. If I don't want anyone seeing my stuff, I make it a point to set the security permissions myself on the folder or password protect the documents.- Marked As Answer by Bulbous Friday, August 24, 2012 1:57 PM
-
Tuesday, August 21, 2012 5:29 AMModerator
My understanding is that having users home folder accessible only to themselves and administrators is standard practice. I find myself having to defend this practice.
+1 for quoted statement above.
Home folders should never be shared among various dept.s or entire organisation !
I do not represent the organisation I work for, all the opinions expressed here are my own.
This posting is provided "AS IS" with no warranties or guarantees and confers no rights.
- .... .- -. -.- ... --..-- ... .- -. - --- ... .... -
Tuesday, August 21, 2012 6:05 AMModerator
Hi,
By default, the permissions on the home folder are set to Administrators full control and the individual user with full control. You can read the following KBs:
How to Set Up Home Folders for User Accounts
http://support.microsoft.com/kb/298403
The default permissions for home folders in Windows Server 2003 and in Windows 2000 are different
http://support.microsoft.com/kb/817009You can modify the default permissions of it based on your requirement. You can deploy some logon scripts to reset the permissions on home folders, here is a sample:
Reset the file permissions on homedrives
http://www.edugeek.net/wiki/index.php?title=Reset_the_file_permissions_on_homedrivesRegards,
Cicely- Edited by Cicely FengMicrosoft Contingent Staff, Moderator Tuesday, August 21, 2012 6:08 AM
- Marked As Answer by Cicely FengMicrosoft Contingent Staff, Moderator Friday, August 24, 2012 5:22 AM
- Unmarked As Answer by Bulbous Friday, August 24, 2012 1:57 PM
-
Tuesday, August 21, 2012 1:30 PM
Thanks for the how-to. But my question is not "how do I", but rather "Why?".
A manager has approached me and asked me why home folders are private. He figures there is no expectation of privacy at work, and thinks the contents should be visible to all. I need to explain why they should remain private.
-
Tuesday, August 21, 2012 1:55 PMModerator
But my question is not "how do I", but rather "Why?"
Standard answer would be "THAT'S BY DESIGN".
A manager has approached me and asked me why home folders are private.
Again, you can repeat the answer "THAT'S BY DESIGN". Home folders are assigned to user profiles and they are meant to be private folders. Generally, users would be asked to keep their important documents in Home folders !
He figures there is no expectation of privacy at work, and thinks the contents should be visible to all. I need to explain why they should remain private.
Wow, the Manager in question seems to be a Genius !!! You might need to redirect the so called "Manager" to Info Security team of your company and they will be in a position to explain him/her why or why not contents should be visible to all.
I do not represent the organisation I work for, all the opinions expressed here are my own.
This posting is provided "AS IS" with no warranties or guarantees and confers no rights.
- .... .- -. -.- ... --..-- ... .- -. - --- ... ....- Marked As Answer by Cicely FengMicrosoft Contingent Staff, Moderator Friday, August 24, 2012 5:22 AM
- Unmarked As Answer by Bulbous Friday, August 24, 2012 1:57 PM
-
Tuesday, August 21, 2012 2:17 PMModerator
Hi,
Agree with Santosh, this is by design, home folder is like a house for a user, it stores and collects many or all files specially for some user account centrally. This should be private and only be available to this user.
Wish your manager could understand this. Good luck to you:)
Regards,
Cicely- Edited by Cicely FengMicrosoft Contingent Staff, Moderator Tuesday, August 21, 2012 2:18 PM
-
Friday, August 24, 2012 1:59 PM
I've actually seen it both ways. I was a "consultant" and had 2-3 of my clients that the home folders were visible to everyone on the domain. But, almost always the home folders have been only accessbile to the user and the admins. If I don't want anyone seeing my stuff, I make it a point to set the security permissions myself on the folder or password protect the documents.
Thank you. It is nice to know that someone has been required to implement semi-public home folders. I think it's a ridiculous idea.
Also, appreciation from the rest who have confirmed that private home folders is standard practice.

