C:\users shared by default

I find this very weird. It means that all users who think they can put their personal files in the my documents folder, are in for a surprise. And most users actually do just that. Which means that anyone on the network can have access to users' personal files, unless they stop sharing c:\users manually.

Find more posts tagged with

Comments

crrussell3

NTFS rights would prevent just anyone from accessing their user folder though. That is, unless the person has local admin rights.

Dracula28

Are you sure about that? Because the everyone group has read NTFS permissions on the c:\users folder, which would give everyone the effective read permission on the folder. Perhaps it depends on who are members of the local built-in everyone group in Windows 7.

I'll try this in a lab tomorrow.

Hyper-Me

I run 7 ultimate at home and my C:\users is not shared by default.

MentholMoose

Dracula28 wrote: »

Are you sure about that? Because the everyone group has read NTFS permissions on the c:\users folder, which would give everyone the effective read permission on the folder. Perhaps it depends on who are members of the local built-in everyone group in Windows 7.

I'll try this in a lab tomorrow.

Just check the permissions on the actual profile directories. They don't have permissions for "Everyone".

dynamik

MentholMoose wrote: »

Just check the permissions on the actual profile directories. They don't have permissions for "Everyone".

Odd. Mine did. However, I also disabled sharing.

crrussell3

Dracula28 wrote: »

Are you sure about that? Because the everyone group has read NTFS permissions on the c:\users folder, which would give everyone the effective read permission on the folder. Perhaps it depends on who are members of the local built-in everyone group in Windows 7.

I'll try this in a lab tomorrow.

True, the Users folder may give Everyone "Read" permissions, but the child folders in it will have inheritance disabled, thus removing the everyone group.

I run 7 ultimate at home and my C:\users is not shared by default.

Odd, mine is shared by default. The folder doesn't have the "shared" icon, but if you unc your hostname or check your shares, mine is shared. Wonder what is with the inconsistent settings?

astorrs

crrussell3 wrote: »

Hyper-Me wrote: »

I run 7 ultimate at home and my C:\users is not shared by default.

Odd, mine is shared by default. The folder doesn't have the "shared" icon, but if you unc your hostname or check your shares, mine is shared. Wonder what is with the inconsistent settings?

Hyper-Me isn't a member of a Homegroup while crrussell3 is - that would be my guess for the differences (haven't checked in a lab though).

Hyper-Me

astorrs wrote: »

Hyper-Me isn't a member of a Homegroup while crrussell3 is - that would be my guess for the differences (haven't checked in a lab though).

That would likely be it.

Homegroups share out certain folders/libraries for access across the whole group.

crrussell3

astorrs wrote: »

Hyper-Me isn't a member of a Homegroup while crrussell3 is - that would be my guess for the differences (haven't checked in a lab though).

Ah yes, didn't think about Homegroup. That would account for it.

Dracula28

Yes, I think it is related to homegroups. When two computer joins a homegroup, the users can freely browse each others profiles (docs, pictures etc), because the homeusers group is given read permissions.

xukaxuka3

Hyper-Me wrote: »

I run 7 ultimate at home and my C:\users is not shared by default.

Yes, your are true. I accept with information: the Users folder may give Everyone "Read" permissions, but the child folders in it will have inheritance disabled, thus removing the everyone group.