I have 1000 home folders on the on share that I need to reset permissions so only user and domain adminstrator can see it and remove inhertance. What is the best way
#205414 - 2012-06-2304:10 AMRe: reset a security permissions on home folder
[Re: Lonkero]
Glenn BarnasGlenn Barnas KiX Supporter
Registered: 2003-01-28
Posts: 4401
Loc: New Jersey
Non-scripting solution might be quick -
Apply Administrators / Full Control to root of share folder, removing all user access. Remove inheritance.
In ADUC - select the users (click - shift-click to select a range. Delete the home path.
Re-select the group of users, define the home path to "\\server\share\%USERNAME%" - the user folders will be verified and permission assigned with the user having full control. Since the folder already exists, you will be prompted to grant the user access to the existing folder.
If you are going to script, look for the UDFs to query AD for a list of users. If you have a list of users that need to be modified, use something like FileIO() to read the text file into an array. As before, start by granting Admin/Full without inheritance, then enumerate the array of user IDs. Use Shell to call CACLS to grant the user full control on the folder. Use the /E switch to edit rather than replace the ACLs!
Note that messing with user home folders on 2K8 platforms isn't always a good idea. That's why I always let AD create the home folder and set the permissions. Clean and always works.
Glenn
_________________________ Actually I am a Rocket Scientist!
