Active Directory BULK create users with home folders - With $ share and security perm

[ITJS2015]

Hi Everyone

 

I am wondering if anyone can help me, a year or 2 back from my previous school I used a script that create AD users which also had in to create home folders, security and shares for our domain. It looked at a spreadsheet with fields for each column so I have tried replicating the same way but I was unsuccessful.

 

I am asking anyone out there could they share there info with me on how easy or simple to create it as I have a few schools to sort this out due to most students use one account with a home folder with the students folders in there which I think is not the way to go.

 

Can anyone help

 

Cheers

[DavetheITguy]

It was called User Management by David Wiseman

[ITJS2015]

I have used this before and when I do the sharing permissions they never set properly and never adds the user to the security permissions. Now a few people who iv spoken to said that they don't need it. But we do the security permissions wont let us access the folder even if the sharing is set but when it completed it half worked and im having to set the sharing and security permissions properly on how we do it.

 

 

Is there not bat file which can be created with looks at spreadsheet with the correct fields

[DavetheITguy]

I use it and it does work. when you open the spreadsheet it explains that you need to add the dll to the system folder and permissions will be added without error.

[ITJS2015]

Can you tell me where the security permissions get set in that software. I am looking for it and the only thing I can see which related to that is the home folder so can you point it out to me please

 

Thanks

[winng]

We use Dovestones applications to create user accounts and then their home folders, etc.

 

Active Directory Tools - Dovestones Software

[Davit2005]

+1 for Dovestones.

 

You do not need to share individual folders, jus share the root folder and give users permission to their individual folders. The individual shared folders is (pardon the pun) a bit old school IMO.

[ITJS2015]

But does that give everyone access to see everyone elses folder on the root of the main folder with everyone home folder in ?

[IrritableTech]

I've used some tools from wisesoft in the past: WiseSoft - Resources for IT Professionals and Mikes Active User Manager, but the link to that has long gone.

 

I agree making every user a share isn't necessary. It's worth noting that if you've already created a root share, lets say 'users' then you can apply home drives after creating the accounts in a quick easy manner. Select all the users in your OU, right click and select properties. Go to the profile tab and tick home folder. Set your drive letter and enter \\server\users\staff\%USERNAME%\ and it'll create all the folders for you with each user having full on their individual folder. No additional tools required.

[ITJS2015]

Fair enough but still how does the user account get a share folder without the sharing being done? when they login ? If people are saying the root of the folder which means (correct if im wrong) the main folder with all home folders in then why are users seeing all this.

 

I just want them to see there main home folder and nothing else

[IrritableTech]

We have it here that the USERS share has sharing settings so everyone has full control. Sharing permissions really aren't worth anything and we leave it to NTFS permissions. On that USERS folder the NTFS permissions are that all users can read and list that folder. Lower down we have a staff folder (not shared) and the NTFS permissions are such that our staff security group can read and list that folder. Then we have our user folders below that. Each user has modify on their own folder and this folder is setup as their home drive as per my previous post.

 

Each user could look at the network and see other user folders listed, but they couldn't access anything within them.

 

The users are getting write access to a folder which is below a share rather than each user having a share. When they click on their home drive they simply see their documents if you use my previous example. You can also use redirection for the My Docs etc. and users will never see the organised structure above their folder.

[ITJS2015]

I think I get your drift lol

 

I take it that is what most people are doing now, I have used the sharing method in my last secondary school but moving to primary is totally different setup.

 

Ill try this out with one of my primary schools first before roling it out.

 

Thank you everyone for you guidance and information

[Davit2005]

Back in the old days when you had FAT32 shares it was a bit more complex.

 

Just make sure you go the Advanced Sharing route, Everyone Full on Sharing Tab and then control security with NTFS permissions. If you need to give people Full permission to their own folders untick the Change Permissions box or Disable the security tab via GPO. 99% of users will not have enough understanding of permissions to make appropriate changes and will prob end up causing you grief.

[Blue_Cookeh]

I think I get your drift lol

 

I take it that is what most people are doing now, I have used the sharing method in my last secondary school but moving to primary is totally different setup.

 

Ill try this out with one of my primary schools first before roling it out.

 

Thank you everyone for you guidance and information

 

You can hide other users' folders by enabling Access Based Enumeration on your folder share. This hides any folders that the user doesn't have read permissions on.