Home paths in server 2k3 + full permissions to user

[Oops_my_bad]

Is there anyway you can stop server 2003 from granting "full control" on a users home path? This is the folder that is automatically created when you add the user in AD and give them a home path. I've had a few kids changing folder permissions lately. I will probs do a script which sorts out existing home folders but in the meantime want to stop this from the outset.

Cheers

[timzim]

I'd write a quick script using CACLS to change permissions. I guess you're only creating large groups of users once a year and individuals every now and then, so you can run the script for the former and just reset the permissions manually for the latter.
To see the options for CACLS just type CACLS in a cmd window.

[srochford]

I don't think I've ever found a way to change that default.

I run cacls (or similar - I have phases of using subinacl or setacl; they can also fix ownership) on a regular basis to make sure everything is clean.

[robknowles]

If I were you, as I've done at my school, I would disable (via group policy) the ability for students to see the Security Tabs on the files/folders properties screen. I don't see any reason why they need it.

[Oops_my_bad]

Thanks chaps. I disabled the security tab in GP (can't imagine why this wasnt disabled in the first place).

Of course this still leaves a load of folders with full control granted to the brats. I will leave this to my cacls script :twisted:

[tarquel]

Having a blind day i think....

Can you tell me where that setting in the GP is? Now seems like a good time to check if I've done it or not on the pupils GPO.

Cheers
Nath.

[apeo]

I use a hta script to create single and bulk users so all folder permissions are set that way.

[Oops_my_bad]

Hi tarquel

It's under User config -> admin templates -> windows components -> windows explorer -> remove security tab