+ Post New Thread
Results 1 to 12 of 12
How do you do....it? Thread, Assign each user permission to their own Home directory (in Bulk) in Technical; Hi After having trouble with permissions I need to re add permission for each user to access their own my ...
  1. #1
    networkingNut's Avatar
    Join Date
    Oct 2008
    Location
    Midlands
    Posts
    144
    Thank Post
    15
    Thanked 2 Times in 2 Posts
    Rep Power
    12

    Assign each user permission to their own Home directory (in Bulk)

    Hi
    After having trouble with permissions I need to re add permission for each user to access their own my documents.

    E.g give the user bloggsf permission on the folder bloggsf
    Is there a way to do it in bulk as obviously doing each user may take a while?

    I have looked at ADModify but had no luck.

    Thanks
    nN

  2. #2


    Join Date
    Feb 2007
    Location
    Northamptonshire
    Posts
    4,692
    Thank Post
    352
    Thanked 797 Times in 716 Posts
    Rep Power
    347
    David's tool here should sort it out for you nice and quick.

  3. #3

    Join Date
    Feb 2007
    Location
    Four Oaks
    Posts
    283
    Thank Post
    37
    Thanked 10 Times in 9 Posts
    Rep Power
    21
    could you not just select all of the users in AD and type \\server\folder\%username% in the home directory option them click OK ...this should then give users full access to the home directories again

  4. #4

    DaveP's Avatar
    Join Date
    Oct 2006
    Location
    Can't talk now: The mother-ship is calling!
    Posts
    8,973
    Thank Post
    352
    Thanked 1,298 Times in 888 Posts
    Blog Entries
    4
    Rep Power
    1131
    Quote Originally Posted by mtdmitchell View Post
    could you not just select all of the users in AD and type \\server\folder\%username% in the home directory option them click OK ...this should then give users full access to the home directories again
    This will work but only if you do not have a similar structure to ours for our students and staff.

    Our students are divided up by year group and their home folders cannot be described by simply using %username% because the folder named after their username contains a 'Cached' folder.

    So a Year 7 student username will start with 10 [because they joined the school in 2010]

    The path to Raymond Baxter's home folder in year 7 would be:

    \\Server\YOI2010\10BaxterR\Cached

    The AD path to set this for all of the users in the Year 7 OU is:

    \\Server\YOI2010\%Username%\Cached

    While for Year 8 it would be:

    \\Server\YOI2009\%Username%\Cached

    The Cached folder is a remnant from an old network. I just thought I should highlight this incase you have a similar folder structure.

    HTH.

  5. #5

    john's Avatar
    Join Date
    Sep 2005
    Location
    London
    Posts
    10,619
    Thank Post
    1,499
    Thanked 1,053 Times in 922 Posts
    Rep Power
    304
    Quote Originally Posted by kmount View Post
    David's tool here should sort it out for you nice and quick.
    Another vote for that Wisesoft tool, I use it all the time to do permissions and its great

  6. #6
    morganw's Avatar
    Join Date
    Apr 2009
    Location
    Cambridge
    Posts
    816
    Thank Post
    46
    Thanked 132 Times in 126 Posts
    Rep Power
    40
    You could use cacls in a for loop in a batch script, or you can do something similar in powershell with get-acl and set-acl cmdlets. It is more work in the short term but you can customise your scripts to also do other things like populate other fields in AD, create the shares on user folders, put users into the correct security groups etc. Could save you time in the long run.

  7. #7

    3s-gtech's Avatar
    Join Date
    Mar 2009
    Location
    Wales
    Posts
    2,816
    Thank Post
    146
    Thanked 571 Times in 515 Posts
    Rep Power
    154
    Done this many times with cacls, as it sets the Ownership for FSRM. ADModify sorts the permissions nicely though.

  8. #8

    glennda's Avatar
    Join Date
    Jun 2009
    Location
    Sussex
    Posts
    7,816
    Thank Post
    272
    Thanked 1,138 Times in 1,034 Posts
    Rep Power
    350
    if you pm me in the morning so i remember i will post a copy of the script we use to do it

    T

  9. #9
    eddyc's Avatar
    Join Date
    Aug 2008
    Location
    Bristol
    Posts
    438
    Thank Post
    99
    Thanked 47 Times in 43 Posts
    Rep Power
    22
    So are you trying to get the home folders paths set in AD or are you trying to set the NTFS permission back on the folder.

    If you are trying to set the NTFS permissions back on the folder I had the same problem earlier in the week and used the Wisesoft NTFS Fix utility -

    http://www.wisesoft.co.uk/software/ntfsfix/default.aspx its great and doesn't need scripting.

    You just select the base folder such as D:\Students\Intake2004\ and then tell it to set the permissions as %foldername% - so folder 12345 grants the user 12345 the permissions you select and so on and so forth.

  10. Thanks to eddyc from:

    tech_guy (16th December 2010)

  11. #10

    Join Date
    Feb 2007
    Location
    Four Oaks
    Posts
    283
    Thank Post
    37
    Thanked 10 Times in 9 Posts
    Rep Power
    21
    Quote Originally Posted by DaveP View Post
    This will work but only if you do not have a similar structure to ours for our students and staff.

    Our students are divided up by year group and their home folders cannot be described by simply using %username% because the folder named after their username contains a 'Cached' folder.

    So a Year 7 student username will start with 10 [because they joined the school in 2010]

    The path to Raymond Baxter's home folder in year 7 would be:

    \\Server\YOI2010\10BaxterR\Cached

    The AD path to set this for all of the users in the Year 7 OU is:

    \\Server\YOI2010\%Username%\Cached

    While for Year 8 it would be:

    \\Server\YOI2009\%Username%\Cached

    The Cached folder is a remnant from an old network. I just thought I should highlight this incase you have a similar folder structure.

    HTH.
    Yes quite right it wont work on your network, but its not your network in question? and not a normal structure

  12. #11

    Join Date
    Apr 2010
    Posts
    2,051
    Thank Post
    83
    Thanked 188 Times in 155 Posts
    Rep Power
    84
    Why not spend the time making your structure more normal and then use the tool?

  13. #12

    glennda's Avatar
    Join Date
    Jun 2009
    Location
    Sussex
    Posts
    7,816
    Thank Post
    272
    Thanked 1,138 Times in 1,034 Posts
    Rep Power
    350
    Code:
    for /d %%1 in (*) do echo y|cacls %%1 /t /g %%1:F administrators:f "manage student data":r "domain admins":f System:F "teaching Staff":r
    Just change the names in the " to which ever groups you need to set permissions to then behind the : f means full control :m means modify : r means read only

    T

SHARE:
+ Post New Thread

Similar Threads

  1. Bulk update of Active Directory user info
    By Geoff in forum Windows
    Replies: 30
    Last Post: 14th June 2013, 04:04 PM
  2. Active Directory - Single and Bulk User creation and FREE!!
    By siuko in forum How do you do....it?
    Replies: 39
    Last Post: 20th June 2012, 11:29 AM
  3. Replies: 11
    Last Post: 20th February 2011, 03:34 AM
  4. Assign Students to a Particular role in bulk
    By LukeC in forum Virtual Learning Platforms
    Replies: 4
    Last Post: 19th January 2010, 06:21 PM
  5. User's Home Directory Ownership
    By dsm in forum Windows Server 2008
    Replies: 1
    Last Post: 16th June 2009, 08:54 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •