Assign each user permission to their own Home directory (in Bulk)

[networkingNut]

Hi

After having trouble with permissions I need to re add permission for each user to access their own my documents.

 

E.g give the user bloggsf permission on the folder bloggsf

Is there a way to do it in bulk as obviously doing each user may take a while?

 

I have looked at ADModify but had no luck.

 

Thanks

nN

[kmount]

David's tool here should sort it out for you nice and quick.

[mtdmitchell]

could you not just select all of the users in AD and type \\server\folder\%username% in the home directory option them click OK ...this should then give users full access to the home directories again

[6Foot2]

could you not just select all of the users in AD and type \\server\folder\%username% in the home directory option them click OK ...this should then give users full access to the home directories again

 

This will work but only if you do not have a similar structure to ours for our students and staff.

 

Our students are divided up by year group and their home folders cannot be described by simply using %username% because the folder named after their username contains a 'Cached' folder.

 

So a Year 7 student username will start with 10 [because they joined the school in 2010]

 

The path to Raymond Baxter's home folder in year 7 would be:

 

\\Server\YOI2010\10BaxterR\Cached

 

The AD path to set this for all of the users in the Year 7 OU is:

 

\\Server\YOI2010\%Username%\Cached

 

While for Year 8 it would be:

 

\\Server\YOI2009\%Username%\Cached

 

The Cached folder is a remnant from an old network. I just thought I should highlight this incase you have a similar folder structure.

 

HTH.

[john]

David's tool here should sort it out for you nice and quick.

 

Another vote for that Wisesoft tool, I use it all the time to do permissions and its great

[morganw]

You could use cacls in a for loop in a batch script, or you can do something similar in powershell with get-acl and set-acl cmdlets. It is more work in the short term but you can customise your scripts to also do other things like populate other fields in AD, create the shares on user folders, put users into the correct security groups etc. Could save you time in the long run.

[3s-gtech]

Done this many times with cacls, as it sets the Ownership for FSRM. ADModify sorts the permissions nicely though.

[glennda]

if you pm me in the morning so i remember i will post a copy of the script we use to do it

 

T

[eddyc]

So are you trying to get the home folders paths set in AD or are you trying to set the NTFS permission back on the folder.

 

If you are trying to set the NTFS permissions back on the folder I had the same problem earlier in the week and used the Wisesoft NTFS Fix utility -

 

http://www.wisesoft.co.uk/software/ntfsfix/default.aspx its great and doesn't need scripting.

 

You just select the base folder such as D:\Students\Intake2004\ and then tell it to set the permissions as %foldername% - so folder 12345 grants the user 12345 the permissions you select and so on and so forth.

[mtdmitchell]

This will work but only if you do not have a similar structure to ours for our students and staff.

 

Our students are divided up by year group and their home folders cannot be described by simply using %username% because the folder named after their username contains a 'Cached' folder.

 

So a Year 7 student username will start with 10 [because they joined the school in 2010]

 

The path to Raymond Baxter's home folder in year 7 would be:

 

\\Server\YOI2010\10BaxterR\Cached

 

The AD path to set this for all of the users in the Year 7 OU is:

 

\\Server\YOI2010\%Username%\Cached

 

While for Year 8 it would be:

 

\\Server\YOI2009\%Username%\Cached

 

The Cached folder is a remnant from an old network. I just thought I should highlight this incase you have a similar folder structure.

 

HTH.

 

Yes quite right it wont work on your network, but its not your network in question? and not a normal structure

[edutech4schools]

Why not spend the time making your structure more normal and then use the tool?

[glennda]

for /d %%1 in (*) do echo y|cacls %%1 /t /g %%1:F administrators:f "manage student data":r "domain admins":f System:F "teaching Staff":r 

 

Just change the names in the " to which ever groups you need to set permissions to then behind the : f means full control :m means modify : r means read only

 

T