In the process of creating new AD structure for next year, and reviewing the home folder structure we have at present
currently it is \\file-server\pupils\year xx\%username%
where pupils is the share name
But this is causing some problems with permissions (some kids have found they can hit this directory and view its contents)
Is it possible to stop them viewing the contents of pupils and also the year xx folders, but still have the appropriate rights to their own folder?
Or would it be easier to share their actual home folder itself?