|
I always make sure that the name of a user's home
directory is their username (eg user 1973 gets d:\home\1973 etc). This then
allows things like:
for /d %i in (*) do setacl -on d:\home\%i -ot file -actn
setowner - ownr domain\:%i -rec cont_obj
this runs setacl for each folder and for object type file
performs action setowner sets the owner to be domain\username and recurses
through all folders and files.
I've now given up using folder redirection to create the
home folders; I don't want users to be able to create folders in the "home" area
but they have to have permissions to do this if they are to create their own
home folder (I work in a college and students will both accidentally and
maliciously create random folders if they're given half a chance!) and I don't
want them to have full permissions on any folder (again, it's a recipe for
disaster, including changing permissions and ending up in a mess!) I just create
the user's home folder as part of the user creation script.
Steve
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin
A.
Sent: 1 February 2005 14:58
To:
[email protected]
Subject: RE: [ActiveDir] GPO My Documents
Redirect Question
It appears that the
user is the owner only when I configure the home folder while acutally on a
Domain Controller. If I am using ADU&C from a member server or
workstation, even if I run as the administrator the administrators group is the
owner of the folder and the redirecting fails.
Justin A. Salandra
MCSE Windows 2000 &
2003
Network and Technology Services
Manager
Catholic Healthcare
System
212.752.7300 -
office
917.455.0110 -
cell
[EMAIL PROTECTED]
-----Original
Message-----
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Salandra, Justin
A.
Sent: Monday, January 31,
2005 9:15 PM
To:
[email protected]
Subject: RE: [ActiveDir] GPO My Documents
Redirect Question
From:
[EMAIL PROTECTED] on behalf of Darren Mar-Elia
Sent: Mon 1/31/2005 4:57 PM
To:
[email protected]
Subject: RE: [ActiveDir] GPO My Documents
Redirect Question
Are you checking the "Grant Exclusive rights to the
folder..." option
when you set up redirection?
-----Original
Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]
On Behalf Of Salandra,
Justin A.
Sent: Monday, January 31, 2005 1:31
PM
To: [email protected]
Cc: [EMAIL PROTECTED]
Subject:
RE: [ActiveDir] GPO My Documents Redirect Question
There are only errors
when the user is not the owner of the folder.
Once they are the owner then
all is good.
-----Original Message-----
From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]
On Behalf Of Darren Mar-Elia
Sent: Monday, January 31, 2005 3:36 PM
To:
[email protected]
Cc: [EMAIL PROTECTED]
Subject: RE:
[ActiveDir] GPO My Documents Redirect Question
Justin-
This should not
be the case. Are there any Folder Redirection errors in
the application event
log? If not you might try enabling verbose FR
logging. Check out my
gpolog.adm for details.
Darren
-----Original Message-----
From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]
On Behalf Of Salandra,
Justin A.
Sent: Monday, January 31, 2005 12:03
PM
To: [email protected]
Cc: [EMAIL PROTECTED]
Subject:
RE: [ActiveDir] GPO My Documents Redirect Question
How can I get it so
that when I create the home directory through ADU&C
the redirecting of
the My Documents works correctly.. I have found that
it doesn't work unless
the user account is the owner of the folder and
you can imagine how much of a
pain that is.
Justin A. Salandra
MCSE Windows 2000 &
2003
Network and Technology Services Manager
Catholic Healthcare
System
212.752.7300 - office
917.455.0110 -
cell
[EMAIL PROTECTED]
-----Original Message-----
From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]
On Behalf Of Salandra,
Justin A.
Sent: Monday, January 31, 2005 1:55
PM
To: [email protected]
Subject: [ActiveDir] GPO My Documents
Redirect Question
If I do not set the home folder in ADU&C for each
user, but I configure
the group policy to create a folder under the root path
and I specify
what the root path is, the GPO will auto create the location
when they
login right? And that folder will be the owner of the
directory?
Justin A. Salandra
MCSE Windows 2000 & 2003
Network
and Technology Services Manager
Catholic Healthcare System
212.752.7300 -
office
917.455.0110 - cell
[EMAIL PROTECTED]
List
info : http://www.activedir.org/List.aspx
List
FAQ : http://www.activedir.org/ListFAQ.aspx
List
archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List
info : http://www.activedir.org/List.aspx
List
FAQ : http://www.activedir.org/ListFAQ.aspx
List
archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List
info : http://www.activedir.org/List.aspx
List
FAQ : http://www.activedir.org/ListFAQ.aspx
List
archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List
info : http://www.activedir.org/List.aspx
List
FAQ : http://www.activedir.org/ListFAQ.aspx
List
archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List
info : http://www.activedir.org/List.aspx
List
FAQ : http://www.activedir.org/ListFAQ.aspx
List
archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
|
