What is the easiest way to automate directory security permissions? All our home drive folder permission has changed (someone added the everyone group to the drive and all the folders inherited it). I want to be able to change the permissions back to Domain admins (Full control) and %username% (Modify). Is there an easy way or would I have to do them manually?
Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
ACL's
- Thread starter FUBAR911
- Start date
ok so with that being said, yoru not using real home directories, or they would not be inheriting by default.
did someone have to take ownership at some point before?
default behavior is to create the folder with the creator as the owner and full control, with no access for anyone else if i remember correctly
what O/S we talking about here on the server
are you assigning the home directories through AD or just creating them with teh logon script
the easy route is to create a new root folder for profiles, write into the logon script to create \\server\share\profiledir\%username%, then write in to cut the contents from the old folder into the new folder
that should do the trick assuming you are on Win2k or up
regardless if using cacls, subinacls, or xcacles, the script will take you longer to modiify then actually changing the perms manually, depending on how many objects we're talking about of course..but you would have to specify each user to set on which folder, which entails a seperate line per folder
users should have full control of theri home drives however, expecially if you plan on using folder redirection or anything, in which case they should eb the owner too
-Brandon Wilson
MCSE00/03, MCSA:Messaging, MCSA03, A+
almost got a paragraph there
did someone have to take ownership at some point before?
default behavior is to create the folder with the creator as the owner and full control, with no access for anyone else if i remember correctly
what O/S we talking about here on the server
are you assigning the home directories through AD or just creating them with teh logon script
the easy route is to create a new root folder for profiles, write into the logon script to create \\server\share\profiledir\%username%, then write in to cut the contents from the old folder into the new folder
that should do the trick assuming you are on Win2k or up
regardless if using cacls, subinacls, or xcacles, the script will take you longer to modiify then actually changing the perms manually, depending on how many objects we're talking about of course..but you would have to specify each user to set on which folder, which entails a seperate line per folder
users should have full control of theri home drives however, expecially if you plan on using folder redirection or anything, in which case they should eb the owner too
-Brandon Wilson
MCSE00/03, MCSA:Messaging, MCSA03, A+
almost got a paragraph there
- Status