Create NTFS permissions that will propagate on Windows 2008

[old-jeeper]

Hi all, need to create appx. 3000 user accounts with home folders on a 2008R2 server. Domain is Windows Windows 2003 R2. Have been using a scripting program called AdmnWin, has worked well for for years. Now with 2008 it is giving me issues. I can create the users and home folders no problem. The created folders inherit the security from the parent just fine, but I need to add the individuals security to his own home folder and that part does not work. I have tried every combination of cacls and icacls that I can find. I can get the NTFS permissions set so that I can login as the user and create a folder or file in the "home" folder but cannot open it until I run the icacls again. I feel certain that I am just missing some simple syntax with icacls. Basically the permissions are not propagating to sub-folders and files.

 

My icacls looks like this: icacls e:\stuhome\%CommonName% /inheritance:e /t /Grant:r %CommonName%:M

[ChrisMiles]

The command should be like this:

 

icacls e:\stuhome\%CommonName% /inheritance:e /grant:r "%CommonName%:(OI)(CI)RXMWD"

[old-jeeper]

The command should be like this:

 

icacls e:\stuhome\%CommonName% /inheritance:e /grant:r "%CommonName%:(OI)(CI)RXMWD"

 

 

THANK YOU!

 

I missed the quotation marks.

 

It works.