David's tool here should sort it out for you nice and quick.
After having trouble with permissions I need to re add permission for each user to access their own my documents.
E.g give the user bloggsf permission on the folder bloggsf
Is there a way to do it in bulk as obviously doing each user may take a while?
I have looked at ADModify but had no luck.
could you not just select all of the users in AD and type \\server\folder\%username% in the home directory option them click OK ...this should then give users full access to the home directories again
Our students are divided up by year group and their home folders cannot be described by simply using %username% because the folder named after their username contains a 'Cached' folder.
So a Year 7 student username will start with 10 [because they joined the school in 2010]
The path to Raymond Baxter's home folder in year 7 would be:
The AD path to set this for all of the users in the Year 7 OU is:
While for Year 8 it would be:
The Cached folder is a remnant from an old network. I just thought I should highlight this incase you have a similar folder structure.
You could use cacls in a for loop in a batch script, or you can do something similar in powershell with get-acl and set-acl cmdlets. It is more work in the short term but you can customise your scripts to also do other things like populate other fields in AD, create the shares on user folders, put users into the correct security groups etc. Could save you time in the long run.
Done this many times with cacls, as it sets the Ownership for FSRM. ADModify sorts the permissions nicely though.
if you pm me in the morning so i remember i will post a copy of the script we use to do it
So are you trying to get the home folders paths set in AD or are you trying to set the NTFS permission back on the folder.
If you are trying to set the NTFS permissions back on the folder I had the same problem earlier in the week and used the Wisesoft NTFS Fix utility -
http://www.wisesoft.co.uk/software/ntfsfix/default.aspx its great and doesn't need scripting.
You just select the base folder such as D:\Students\Intake2004\ and then tell it to set the permissions as %foldername% - so folder 12345 grants the user 12345 the permissions you select and so on and so forth.
tech_guy (16th December 2010)
Why not spend the time making your structure more normal and then use the tool?
Just change the names in the " to which ever groups you need to set permissions to then behind the : f means full control :m means modify : r means read onlyCode:for /d %%1 in (*) do echo y|cacls %%1 /t /g %%1:F administrators:f "manage student data":r "domain admins":f System:F "teaching Staff":r
There are currently 1 users browsing this thread. (0 members and 1 guests)