If you have the correct permission structure setup to allow all users to be 
able to create folders at the root folder of your user folder share, then you 
can folder redirection (FR) to automatically create the folders for you.  Since 
the end user has permission to write to the root folder, when they login for 
the first time, FR will create the user folder as well as any redirected 
subfolders you create.  Here are some references to set up the appropriate 
permissions and folder redirection:
http://www.grouppolicy.biz/2010/08/best-practice-roaming-profiles-and-folder-redirection-a-k-a-user-virtualization
http://blogs.technet.com/b/askds/archive/2008/06/30/automatic-creation-of-user-folders-for-home-roaming-profile-and-redirected-folders.aspx
http://technet.microsoft.com/en-us/library/cc775853%28v=ws.10%29.aspx

If you use mapped home folder drives in you environment, then you can either 
create a Group Policy Preference Folder item to automatically create the 
folder, or use a login script.

Personally though, I don't use auto create folders since in our environment I 
am concerned about users creating folders at the root of the user share either 
accidentally or intentionally.  In addition, we encountered a problem where if 
a folder is auto created using the permissions method above (and the folder is 
set up using "Creator Owner" permissions), and if a support technician copies a 
file/folder into the user folder to help with troubleshooting, the end user 
will not have access to these files by default since the end user is no longer 
the "owner" (the tech is the owner).  These are some of the reasons we did not 
implement auto created folders in our environment.  However, if you use the 
ADUC method, or use a provisioning script that creates the user's folder, then 
you can avoid these problems (this is the approach we use).

-Aakash Shah

From: David Lum [mailto:[email protected]]
Sent: Thursday, February 21, 2013 6:56 AM
To: NT System Admin Issues
Subject: Autocreate home folders

Is the only mechanism to do this via ADUC and specifying the path to a users' 
home directory, or is there a way to also do this via GPO? I swear I had a 
mapped drive GPO that did it, but I'll be damned if I can recreate it.
David Lum
Sr. Systems Engineer // NWEATM
Office 503.548.5229 // Cell (voice/text) 503.267.9764


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
[email protected]<mailto:[email protected]>
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to [email protected]
with the body: unsubscribe ntsysadmin

Reply via email to