CIFS file access with Windows GPO?

I posted this on the storage forums, but thought it was more
appropriately posted here instead:

I'm going to do my best to explain.

In Windows 2003 AD has a Terminal Services GPO where you can define a
terminal services home directory and profile directory and map it.

It expects an SMB share so that when it maps the drive it map roots

We put in a CIFS share like:
"do not append username to directory" is disabled (so that it DOES put
on the \username)

The issue:

If you were in "pure windows" land, you would create a share in Windows
and give the SHARE the following rights:

Create Files/Write Data
Create Folders/Append Data

Then, when you logged in, the GPO would apply and it would create a
folder for you and give you rights to the folder.

Unfortunately it seems that with CIFS I cannot give "share" level
rights and in order to get it to create a folder I have to give it WC

But then I don't see any way to let it give the necessary rights to the
FOLDER to actually create/modify files in the subfolder

I am assuming that the GPO is expecting native SMB calls to assign the
rights and that just won't work with CIFS, yes?

If that's the case, unfortunately DSFW won't work for us either because
you can't map to an entire tree, but can only map to partitions, plus we
already have IDM for syncing.

In which case we'll have to use regular Windows shares/servers for

But was hoping to do this with CIFS.


1/7/2010 4:26:03 PM
novell.native-file-access 2445 articles. 0 followers. Follow

1 Replies

Similar Articles

[PageSpeed] 39


It appears that in the past few days you have not received a response to your 
posting.  That concerns us, and has triggered this automated reply.

Has your problem been resolved? If not, you might try one of the following options:
- Visit and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the 
correct newsgroup. (

Be sure to read the forum FAQ about what to expect in the way of responses:

If this is a reply to a duplicate posting, please ignore and accept our apologies 
and rest assured we will issue a stern reprimand to our posting bot.

Good luck!

Your Novell Product Support Forums Team

1/12/2010 6:42:18 PM