+ Post New Thread
Results 1 to 12 of 12
Windows Thread, Resetting Permissions for Student Home Folders in Technical; Our permissions have always been set weirdly and not working to how we want. So, finally we are looking at ...
  1. #1
    Zoom7000's Avatar
    Join Date
    Feb 2006
    Location
    London
    Posts
    992
    Thank Post
    348
    Thanked 93 Times in 62 Posts
    Rep Power
    34

    Resetting Permissions for Student Home Folders

    Our permissions have always been set weirdly and not working to how we want. So, finally we are looking at fixing it. Ideally we would like all students to have the following permissions on their home folders:

    Administrators - Full Control
    Creator Owner - Full Control
    System - Full Control
    %username& (The actual student) - Full Control
    ViewStudentWork (A group to allow teachers to view the students work) - Read & Execute, List Folder Contents, Read

    All of the above should be for "This Folder, Subfolders and Files"

    Currently the Ownership of the folders are held by the students. Administrators are able to view some of the folders but not all, usually the My Pictures folder.

    Is there a way that I can allocate "en mass" all the above permissions and fix the ownership to be set to the students (if it is messed up like we have seen in the past). If it helps, the students folders are set to the same as their usernames.

    Can anyone point me to, or write me a script, that will make this possible?

    Thanks in advance!

  2. #2

    Join Date
    Nov 2006
    Location
    Reading, UK
    Posts
    489
    Thank Post
    30
    Thanked 15 Times in 9 Posts
    Rep Power
    19

    Re: Resetting Permissions for Student Home Folders

    I use CMD commands such as 'cacls' to set permissions.

  3. #3

    maniac's Avatar
    Join Date
    Feb 2007
    Location
    Kent
    Posts
    3,087
    Thank Post
    210
    Thanked 432 Times in 312 Posts
    Rep Power
    146

    Re: Resetting Permissions for Student Home Folders

    there's two commands that will help you do this.

    XCACLS will allow you to manipulate the Access Control lists on files and folders, and there's also SUBINACL which also allows you to control folder ownership aswell. You can use wildcards with them, so where you have one group that needs access to all the folders, you can accomplish this with a single line. Adding the individual users requires a seperate line for each user concerned. I use a batchfile that I use excel to contruct as a CSV, then use search and replace to remove the commas.

    XCACLS
    http://support.microsoft.com/kb/318754

    SUBINACL
    http://www.microsoft.com/downloads/d...displaylang=en

    Hope that helps.

    Mike.

  4. #4
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    5,007
    Thank Post
    124
    Thanked 286 Times in 263 Posts
    Rep Power
    109

    Re: Resetting Permissions for Student Home Folders

    Modify this for you own setup. Run same level as your users folders:

    Code:
    for /D %%i in (*) do ( subinacl /file %%i /grant=yourdomain\%%i=C "/grant=yourdomain\domain admins=f" /grant=yourdomain\Teachers=r /setowner=yourdomain\%%i "/deny=fishermore\exam group=f"
    
    subinacl /subdirectories %%i\* /grant=yourdomain\%%i=f "/grant=yourdomain\domain admins=f" /grant=yourdomain\Teachers=r /setowner=yourdomain\%%i "/deny=yourdomain\exam group=f" )
    You will need to d/l subinacl.

  5. #5
    Zoom7000's Avatar
    Join Date
    Feb 2006
    Location
    London
    Posts
    992
    Thank Post
    348
    Thanked 93 Times in 62 Posts
    Rep Power
    34

    Re: Resetting Permissions for Student Home Folders

    Thanks Chris, I'm gonna give that a try on the folders for students who have left.

  6. #6
    cookie_monster's Avatar
    Join Date
    May 2007
    Location
    Derbyshire
    Posts
    4,224
    Thank Post
    396
    Thanked 278 Times in 239 Posts
    Rep Power
    75

    Re: Resetting Permissions for Student Home Folders

    You can also use the free NTFSfix for this.

    http://www.wisesoft.co.uk/Products/NTFSFix/

  7. #7
    sahmeepee's Avatar
    Join Date
    Oct 2005
    Location
    Greater Manchester
    Posts
    795
    Thank Post
    20
    Thanked 70 Times in 42 Posts
    Rep Power
    34

    Re: Resetting Permissions for Student Home Folders

    Also be aware that subinacl can be very fussy about you using the correct version. Presumably they changed some of the syntax slightly along the way.

    I scratched my head over a non-working script for quite a while before I figured that one out!

    NTFSFix looks very easy to use.. you'll still need subinacl or similar to fix your ownership though.

  8. #8

    Ric_'s Avatar
    Join Date
    Jun 2005
    Location
    Boston, MA
    Posts
    7,601
    Thank Post
    110
    Thanked 771 Times in 599 Posts
    Rep Power
    183

    Re: Resetting Permissions for Student Home Folders

    This has been discussed before if you do a search. I added my scripts to the wiki at http://edugeekwiki.rm-charlton.net/index.php/Scripts to help people out.

    Admin bit... please search and check the wiki before asking questions

  9. #9
    Zoom7000's Avatar
    Join Date
    Feb 2006
    Location
    London
    Posts
    992
    Thank Post
    348
    Thanked 93 Times in 62 Posts
    Rep Power
    34

    Re: Resetting Permissions for Student Home Folders

    Sorry Ric, I didn't even know that the Wiki existed. I'll have a look there first next time.

    With all due respect though, we did get an alternate solution here from Chris. I'm only saying that because I understand .bat/.cmd better than .vbs

  10. #10
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    5,007
    Thank Post
    124
    Thanked 286 Times in 263 Posts
    Rep Power
    109

    Re: Resetting Permissions for Student Home Folders

    The subinacl method is better than the script you *cough* copied of my user creation script :P so therefore it is new and shiney and in need of sharing .

  11. #11
    azrael78's Avatar
    Join Date
    Sep 2007
    Location
    Devon
    Posts
    383
    Thank Post
    47
    Thanked 37 Times in 33 Posts
    Rep Power
    21

    Re: Resetting Permissions for Student Home Folders

    Is there any particular reason your students NEED full control over their own home folders?

    Ours here have modify - so they can still read/write, but not change permissions (even if they somehow got the security tab or via 3rd party tool).

    I might be missing something, maybe there is some reason that students need full and not modify, but I've not run into it yet here.

  12. #12
    sahmeepee's Avatar
    Join Date
    Oct 2005
    Location
    Greater Manchester
    Posts
    795
    Thank Post
    20
    Thanked 70 Times in 42 Posts
    Rep Power
    34

    Re: Resetting Permissions for Student Home Folders

    We had an issue with folder redirection where it would balk if the user only had modify. YMMV



SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 2
    Last Post: 6th October 2007, 10:46 AM
  2. Student Folder File permissions
    By CM786 in forum Wireless Networks
    Replies: 4
    Last Post: 27th September 2007, 10:28 AM
  3. Replies: 4
    Last Post: 15th March 2007, 09:48 PM
  4. Replies: 8
    Last Post: 1st February 2007, 09:42 AM
  5. Make student folders available externaly
    By daverage in forum Wireless Networks
    Replies: 11
    Last Post: 31st March 2006, 02:13 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •