Hello,

Currently every user has their own private folder (using the default homes setup in smb.conf and individually removed all group and other permissions from the directories). The company president wants his account and the administrator account to also have access to every user share. What is the best way to do this? I thought of creating a new group, then using "force group" to make it the default group on everyone's shares, then adding rwx group permissions to each of the user directories. This is a production system, so I don't like to just try things without being sure.

Will this work or perhaps is there a better way?

TIA,

Al

IMHO that's the best way. If you have extended file system attribues enabled in your kernel you can fine grain it more.

I don't have much experience in setting them up but it's known as Posix Access Control Lists if I remember correctly. Should give you more options for access similar to ntfs permission.

Thanks - Anyone else want to weigh in?

This didn't work. Using force group, changing the group owner to the "admins" group and giving the group full permissions. For some reason, this then allowed anyone to get to anyone else's folder.