IAMCloud_Curt Posted September 30, 2015 Posted September 30, 2015 Afternoon Edugeekers. Ran into a slight problem at this new school. Staff and Student's can't create a new folder. My first thought was permissions on the File Server where the home folders are stored, played around with those and still no luck. I created a Student Test account and moved it out of our School OU into another OU, still no change. I then decided to search the net and try and find a solution, I've come across DACLs and ACLs? If this is the case, where do I edit the ACL's? Or is it something set up in Group Policy? Appreciate any reply that could help me out. Thanks in advance.
win Posted September 30, 2015 Posted September 30, 2015 i would go with permissions. Check both share permissions and security permissions, it should auto create the home folder when they first logon.
Wesparton Posted September 30, 2015 Posted September 30, 2015 Where is it that they are trying to create this folder? Do you use folder redirection to have all staff using a specific desktop? if so, what permissions do they have for this folder?
IAMCloud_Curt Posted September 30, 2015 Author Posted September 30, 2015 Where is it that they are trying to create this folder? Do you use folder redirection to have all staff using a specific desktop? if so, what permissions do they have for this folder? There are trying to create folders in there home folder e.g an English folder for there English coursework.
DaveCoop Posted September 30, 2015 Posted September 30, 2015 Permissions Issue, Check inheritance on your folder structure. If you truly believe its ACL then you need to check GPO on the folder redirection
Wesparton Posted September 30, 2015 Posted September 30, 2015 There are trying to create folders in there home folder e.g an English folder for there English coursework. Assuming your home folders are on the AD / DC server, can you navigate to the home folder of a specific user, right click on this folder, go to properties > security, in the list can you see the user's name? does it say which permissions they have? if they don't have Full Control - enable it. Then test this by logging into the user and creating a folder in their documents. does this allow you to create the folder or does it still appear restricted?
LukeC Posted October 4, 2015 Posted October 4, 2015 Do they actually have the option to create a folder. Ie can they right click and create folder or is right click disabled etc if so I would say it's a gpo in place and not perms
IAMCloud_Curt Posted October 4, 2015 Author Posted October 4, 2015 It can't be GPO. I've just disabled EVERY policy in there and still couldn't create a folder on a staff or student account. Each user has full control to there folder aswell.
IAMCloud_Curt Posted October 4, 2015 Author Posted October 4, 2015 Do they actually have the option to create a folder. Ie can they right click and create folder or is right click disabled etc if so I would say it's a gpo in place and not perms Yeah they have the option at the top, but not on the right click.. When anybody rights click, even admin the "New" option isn't there. Ctrl, Shift + N doesn't work either
DaveCoop Posted October 4, 2015 Posted October 4, 2015 Sounds like a gpo, check this thread http://www.edugeek.net/forums/windows-server-2008-r2/56405-gpo-disable-right-click.html
LukeC Posted October 5, 2015 Posted October 5, 2015 Are they attempting to creat the folder in windows explorer? Can they go into say word and do a save as and create a folder from the save window by pressing the little folder icon?
IAMCloud_Curt Posted October 5, 2015 Author Posted October 5, 2015 Are they attempting to creat the folder in windows explorer? Can they go into say word and do a save as and create a folder from the save window by pressing the little folder icon? Doesn't work on both mate, just tried MSWord and still no joy. Proper bugging me now.. I disabled every policy in our domain yesterday ran a gpupdate force rebooted a few pc's and still can't create them.
nickbro Posted October 5, 2015 Posted October 5, 2015 You may need to reset that user's profile to clear out the GP settings
IAMCloud_Curt Posted October 5, 2015 Author Posted October 5, 2015 You may need to reset that user's profile to clear out the GP settings delprof?
nickbro Posted October 5, 2015 Posted October 5, 2015 Yes, but also clear out the profile on the server it's a roaming profile
IAMCloud_Curt Posted October 5, 2015 Author Posted October 5, 2015 Yes, but also clear out the profile on the server it's a roaming profile Would I need to do this on every profile? As it's happening to everyone
LukeC Posted October 5, 2015 Posted October 5, 2015 delprof was stopped for windows 7 but there is a successor delprof 2 would work or you can do it manually. Right click my computer and properties, advance system settings, settings for user profiles, then deleted the troubling account. If this doesn't work might be worth creating a new ou moving a machine in there and block inheritance incase its set in a policy that you've missed
IAMCloud_Curt Posted October 5, 2015 Author Posted October 5, 2015 delprof was stopped for windows 7 but there is a successor delprof 2 would work or you can do it manually. Right click my computer and properties, advance system settings, settings for user profiles, then deleted the troubling account. If this doesn't work might be worth creating a new ou moving a machine in there and block inheritance incase its set in a policy that you've missed Delprof didn't work, don't think it's a profile issue. Created a TEST OU, moved a laptop into it. Blocked inheritance and still can't create folders.
NB9457 Posted October 5, 2015 Posted October 5, 2015 What permissions are set via the Share and Storage Management? I've found in the past, permissions set via this will override permissions set on the actual folders themselves.
IAMCloud_Curt Posted October 5, 2015 Author Posted October 5, 2015 What permissions are set via the Share and Storage Management? I've found in the past, permissions set via this will override permissions set on the actual folders themselves. Students have FULL CONTROL to StudentHome$ Staff have FULL CONTROL to StaffHome$ This is where the user drive is mapped to. Inheritance is also turned on now. Still no joy.
DaveCoop Posted October 5, 2015 Posted October 5, 2015 Run gpresult on the laptop to see if any GPOs are still being applied then look through them bit by bit. Also create a new user in a separate ou, create a new share for that user that maps to there profile. Basically to test a new environment works
IAMCloud_Curt Posted October 7, 2015 Author Posted October 7, 2015 Still nothing on this one. Here are a few screenshots lads..
NB9457 Posted October 7, 2015 Posted October 7, 2015 Could always go back to basics. Make a new OU and then add the policies to it as you test?
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now