There's a group policy that
controls the homefolder creation to a certain extent, but not in ADUC. I
wouldn't be using ADUC to make them - use some sort of tool. As for fixing the
existing ones, something like cacls and a simple _vbscript_ will do the
trick.
Thanks,
Brian Desmond
Brian Desmond
c -
312.731.3132
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe
Sent: Monday, February 20, 2006 7:26 PM
To: [email protected]
Subject: RE: [ActiveDir] Setting up Home Folder Gives User Full AccessTo my knowledge you can not control what ACLs are placed on the folder.I would recommend what I usually recommend though, create users through a provisioning script or tool, don't do it through ADUC. If you are at 2000 users you are easily into the realm where the ADUC is not the greatest most efficient way to do your management.joe
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
Sent: Friday, February 17, 2006 10:36 AM
To: [email protected]
Subject: [ActiveDir] Setting up Home Folder Gives User Full AccessWe create a home folder for each of our users in ADUC by adding the server path to the Profile Tab. When we setup the home folder, ADUC by default grants the user "Full Control" to this folder, which we would like to stop. We would prefer that they have the ability to read-write, but not to modify the permissions. Two questions here:1) How do we stop ADUC from automatically granting full access to the end user on their home folder?2) We have about 2000 home folders that have already been created with the incorrect permissions already setup. Is there a script or utility that can be used to remove the "Full Access" check box from the individual user accounts on the folders? (just for a bit of background, only the domain admins and the user have access to each home folder).Any guidance would be much appreciated.Bonnie Pohlschneider
