+ Post New Thread
Results 1 to 15 of 15
Windows Thread, User Provisioning Tool in Technical; ops:...
  1. #1
    monkeyx's Avatar
    Join Date
    Nov 2006
    Posts
    365
    Thank Post
    8
    Thanked 52 Times in 41 Posts
    Rep Power
    26

    User Provisioning Tool

    ops:

  2. #2

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,563
    Thank Post
    721
    Thanked 1,682 Times in 1,497 Posts
    Rep Power
    432

    Re: User Provisioning Tool

    Absolutely I have this on my list of things to do to create myself.

    Willing to help where I can.

    Ben

  3. #3

    Join Date
    Feb 2007
    Location
    Norfolk
    Posts
    137
    Thank Post
    2
    Thanked 9 Times in 9 Posts
    Rep Power
    17

    Re: User Provisioning Tool

    I have been playing with this in my spare time too...

    My aim is to be able to export a CSV file from Phoenix and directly import it into AD, setting folder permissions, profile, and highly editable. Currently I have a system whereby I can provide a single command to do add a user, create folders and set permissions. Eg. Username, Fullname, ADOU, etc.

    I'm more than willing to share this around.

    Craig

  4. #4
    monkeyx's Avatar
    Join Date
    Nov 2006
    Posts
    365
    Thank Post
    8
    Thanked 52 Times in 41 Posts
    Rep Power
    26

    Re: User Provisioning Tool

    ops:

  5. #5

    Join Date
    Oct 2006
    Location
    uk
    Posts
    494
    Thank Post
    19
    Thanked 3 Times in 2 Posts
    Rep Power
    17

    Re: User Provisioning Tool

    EDS my word thats a blast from the past worked there about seven years ago in sheffield.

  6. #6
    Quackers's Avatar
    Join Date
    Jan 2006
    Posts
    1,398
    Thank Post
    43
    Thanked 152 Times in 127 Posts
    Rep Power
    55

    Re: User Provisioning Tool

    Its so easy to already with what comes with Windows i do not see the need for such a tool.

    simply open excel

    In column A put the word net - drag down to put the word net in as many cells as you need
    In column B put the word user - drag down to put the word user in as many cells as you need
    In column C put the Username you want (i paste from NovaT)
    In column D put the password you want
    In column E put /add and drag down to put /add in as many cells as you need.

    Then highlight it all, copy, open notepad, do edit paste. Save it as somthing.bat and run it on a domain controller, and bang, all users added in seconds and appear in the Users container. Now copy them to OU needed, highlight all users right click, properties, click the profile tab, tick home directory put \\servername\share\year\%username% as the profile location and Windows Server will create all the home directorys for you and set the right permissions.

    All done in less than 5 minutes, and very easy.

  7. #7

    Ric_'s Avatar
    Join Date
    Jun 2005
    Location
    London
    Posts
    7,592
    Thank Post
    109
    Thanked 770 Times in 598 Posts
    Rep Power
    183

    Re: User Provisioning Tool

    @Quackers: I think that the point is to have an 'idiot-proof' way of doing it. You can of course export from SIMS, etc. to a CSV and with a bit of concatenation squirt the CSV into csvde (see http://www.computerperformance.co.uk...VDE_LDIFDE.htm ) and create the users in the correct OU and everything.

    Of course some clever programming could take a CSV from SIMS and do all the faffing around in the background before using csvde to create the accounts.

  8. #8
    mark's Avatar
    Join Date
    Jun 2005
    Posts
    3,983
    Thank Post
    267
    Thanked 52 Times in 46 Posts
    Blog Entries
    2
    Rep Power
    47

    Re: User Provisioning Tool

    We have a member: David Wiseman, who's site wisesoft.co.uk has his spreadsheet that does this bit already (I think) called Account Management Spreadsheet.

    I use it every year for my account creation.

  9. #9
    monkeyx's Avatar
    Join Date
    Nov 2006
    Posts
    365
    Thank Post
    8
    Thanked 52 Times in 41 Posts
    Rep Power
    26

    Re: User Provisioning Tool

    ops:

  10. #10
    Quackers's Avatar
    Join Date
    Jan 2006
    Posts
    1,398
    Thank Post
    43
    Thanked 152 Times in 127 Posts
    Rep Power
    55

    Re: User Provisioning Tool

    Quote Originally Posted by monkeyx
    Then highlight it all, copy, open notepad, do edit paste. Save it as somthing.bat and run it on a domain controller, and bang, all users added in seconds and appear in the Users container. Now copy them to OU needed, highlight all users right click, properties, click the profile tab, tick home directory put \\servername\share\year\%username% as the profile location and Windows Server will create all the home directorys for you and set the right permissions.

    All done in less than 5 minutes, and very easy.
    Well maybe such a tool is not needed. Can you remind me how you also set the NTFS/Share permissions to give Domain Admin/User FC (ie everyone else has no permission to share, unlike default share permission!) in under 5 minutes as well. Because, if that is so easy I agree such a tool would not be required.

    And yes I am using the word provisioning in that the end goal will be take the data straight from the MIS system. Initial support would have been for Excel. But it looks like there is no real need for such a tool from some of the feedback?
    Create 1 share for the user's home directory's, ie homes.

    NTFS Permissions give

    domain users read (This Folder ONLY)
    domain admins full
    system full

    Then create a folder for each year group, ie 2000, 2001, 2002 on each of these folders i give

    group 2000 read (This folder ONLY)
    domain admins full
    group staff (full, read depending on what you want)
    system full.

    Now when you click User Home Directory and set the path to \\server\homes\2000\%username% a directory with the users username is automatically made and all permissions set correctly, so only that user and what every permissions are inherated are allowed in. (Just make sure the share permissions are set to allow everyone to write.

  11. #11
    monkeyx's Avatar
    Join Date
    Nov 2006
    Posts
    365
    Thank Post
    8
    Thanked 52 Times in 41 Posts
    Rep Power
    26

    Re: User Provisioning Tool

    ops:

  12. #12
    Quackers's Avatar
    Join Date
    Jan 2006
    Posts
    1,398
    Thank Post
    43
    Thanked 152 Times in 127 Posts
    Rep Power
    55

    Re: User Provisioning Tool

    Quote Originally Posted by monkeyx
    (Just make sure the share permissions are set to allow everyone to write.
    to be honest if you class that as an acceptable security policy I give up!
    Thats the share permission, you cannot write to you home directory with read permissions on the share . The NTFS permissions stop them doing anything

  13. #13

    Ric_'s Avatar
    Join Date
    Jun 2005
    Location
    London
    Posts
    7,592
    Thank Post
    109
    Thanked 770 Times in 598 Posts
    Rep Power
    183

    Re: User Provisioning Tool

    Quote Originally Posted by monkeyx
    (Just make sure the share permissions are set to allow everyone to write.
    to be honest if you class that as an acceptable security policy I give up!
    You are confusing share and NTFS permissions I think. Share permissions are not very granular and there are only three options (read, read/write, no access).

    The NTFS permissions are the important part since these can be set on individual files and directories.... you can only write to what the NTFS permissions allow... despite having read/write access to the share.

  14. #14

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,563
    Thank Post
    721
    Thanked 1,682 Times in 1,497 Posts
    Rep Power
    432

    Re: User Provisioning Tool

    If you use net user /add to create users on windows 2000/2003 I think you'll find it doesn't actually create windows 2000 usernames but NT4 equivalent ones.

    This may not cause you problems but it has for me.

    Ben

  15. #15
    apeo's Avatar
    Join Date
    Sep 2005
    Location
    Lost
    Posts
    1,612
    Thank Post
    95
    Thanked 115 Times in 111 Posts
    Rep Power
    42

    Re: User Provisioning Tool

    I use a hta that i created for our network to do everthing for me and the script uses rmtshare, cacls and xcacls to set permissions.

SHARE:
+ Post New Thread

Similar Threads

  1. RM CC3 Package Tool
    By Barcrest in forum Network and Classroom Management
    Replies: 20
    Last Post: 8th November 2007, 11:13 AM
  2. User areas + User share permissions.
    By Dos_Box in forum Windows
    Replies: 6
    Last Post: 11th September 2007, 11:17 AM
  3. Tool for RM All in one
    By johnj1710 in forum General Chat
    Replies: 11
    Last Post: 5th March 2007, 03:48 PM
  4. provisioning wizard
    By colin in forum Learning Network Manager
    Replies: 1
    Last Post: 21st December 2006, 08:24 AM
  5. Provisioning Wizard
    By wesleyw in forum Learning Network Manager
    Replies: 1
    Last Post: 21st June 2006, 02:10 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •