+ Reply to Thread
Results 1 to 12 of 12
  1. Senior Member
    Join Date
    Nov 2007
    Location
    Norway
    Posts
    232

    Certifications
    MCTS, MCSA
    #1

    Default C:\users shared by default

    I find this very weird. It means that all users who think they can put their personal files in the my documents folder, are in for a surprise. And most users actually do just that. Which means that anyone on the network can have access to users' personal files, unless they stop sharing c:\users manually.
    Reply With Quote Quote  

  2. SS -->
  3. Bothan Spy crrussell3's Avatar
    Join Date
    Jun 2009
    Location
    Bothawui
    Posts
    560

    Certifications
    MCTS: 620, 640
    #2
    NTFS rights would prevent just anyone from accessing their user folder though. That is, unless the person has local admin rights.
    Reply With Quote Quote  

  4. Senior Member
    Join Date
    Nov 2007
    Location
    Norway
    Posts
    232

    Certifications
    MCTS, MCSA
    #3
    Are you sure about that? Because the everyone group has read NTFS permissions on the c:\users folder, which would give everyone the effective read permission on the folder. Perhaps it depends on who are members of the local built-in everyone group in Windows 7.

    I'll try this in a lab tomorrow.
    Reply With Quote Quote  

  5. Senior Member
    Join Date
    Jul 2009
    Posts
    2,056

    Certifications
    Beer+
    #4
    I run 7 ultimate at home and my C:\users is not shared by default.
    Reply With Quote Quote  

  6. Senior Member MentholMoose's Avatar
    Join Date
    Sep 2009
    Location
    CA
    Posts
    1,550
    #5
    Quote Originally Posted by Dracula28 View Post
    Are you sure about that? Because the everyone group has read NTFS permissions on the c:\users folder, which would give everyone the effective read permission on the folder. Perhaps it depends on who are members of the local built-in everyone group in Windows 7.

    I'll try this in a lab tomorrow.
    Just check the permissions on the actual profile directories. They don't have permissions for "Everyone".
    Reply With Quote Quote  

  7. Senior Member
    Join Date
    Mar 2007
    Posts
    12,308
    #6
    Quote Originally Posted by MentholMoose View Post
    Just check the permissions on the actual profile directories. They don't have permissions for "Everyone".
    Odd. Mine did. However, I also disabled sharing.
    Reply With Quote Quote  

  8. Bothan Spy crrussell3's Avatar
    Join Date
    Jun 2009
    Location
    Bothawui
    Posts
    560

    Certifications
    MCTS: 620, 640
    #7
    Quote Originally Posted by Dracula28 View Post
    Are you sure about that? Because the everyone group has read NTFS permissions on the c:\users folder, which would give everyone the effective read permission on the folder. Perhaps it depends on who are members of the local built-in everyone group in Windows 7.

    I'll try this in a lab tomorrow.
    True, the Users folder may give Everyone "Read" permissions, but the child folders in it will have inheritance disabled, thus removing the everyone group.

    I run 7 ultimate at home and my C:\users is not shared by default.
    Odd, mine is shared by default. The folder doesn't have the "shared" icon, but if you unc your hostname or check your shares, mine is shared. Wonder what is with the inconsistent settings?
    Reply With Quote Quote  

  9. Drops by now and again astorrs's Avatar
    Join Date
    May 2008
    Location
    Vancouver, Canada
    Posts
    3,141

    Certifications
    I have numerous certs from VMware, Citrix, Microsoft, EMC, Nimble Storage, Palo Alto Networks and more...
    #8
    Quote Originally Posted by crrussell3 View Post
    Quote Originally Posted by Hyper-Me View Post
    I run 7 ultimate at home and my C:\users is not shared by default.
    Odd, mine is shared by default. The folder doesn't have the "shared" icon, but if you unc your hostname or check your shares, mine is shared. Wonder what is with the inconsistent settings?
    Hyper-Me isn't a member of a Homegroup while crrussell3 is - that would be my guess for the differences (haven't checked in a lab though).
    Reply With Quote Quote  

  10. Senior Member
    Join Date
    Jul 2009
    Posts
    2,056

    Certifications
    Beer+
    #9
    Quote Originally Posted by astorrs View Post
    Hyper-Me isn't a member of a Homegroup while crrussell3 is - that would be my guess for the differences (haven't checked in a lab though).
    That would likely be it.

    Homegroups share out certain folders/libraries for access across the whole group.
    Reply With Quote Quote  

  11. Bothan Spy crrussell3's Avatar
    Join Date
    Jun 2009
    Location
    Bothawui
    Posts
    560

    Certifications
    MCTS: 620, 640
    #10
    Quote Originally Posted by astorrs View Post
    Hyper-Me isn't a member of a Homegroup while crrussell3 is - that would be my guess for the differences (haven't checked in a lab though).
    Ah yes, didn't think about Homegroup. That would account for it.
    Reply With Quote Quote  

  12. Senior Member
    Join Date
    Nov 2007
    Location
    Norway
    Posts
    232

    Certifications
    MCTS, MCSA
    #11
    Yes, I think it is related to homegroups. When two computer joins a homegroup, the users can freely browse each others profiles (docs, pictures etc), because the homeusers group is given read permissions.
    Reply With Quote Quote  

  13. Junior Member
    Join Date
    Mar 2010
    Posts
    1
    #12
    Quote Originally Posted by Hyper-Me View Post
    I run 7 ultimate at home and my C:\users is not shared by default.
    Yes, your are true. I accept with information: the Users folder may give Everyone "Read" permissions, but the child folders in it will have inheritance disabled, thus removing the everyone group.
    Reply With Quote Quote  

+ Reply to Thread

Social Networking & Bookmarks