Home Folder Security Settings Question

[Clayton Sutton]

We have a Windows 2003 domain and two file servers running Windows 2000
server.

On one of the file servers (Fileserv1) we have a folder called C:\User.
Under that folder is where all of our user's home folders are. There are
about 1200 user home folders on this one server. It would appear that
"Allow inheritable permissions from parent to propagate to this object" is
checked. Also, on the "Security" tab "Authenticated Users" have "Full
Control" on most of the folders.

Anyone know of a script or tool that I can use to un-check "Inheritable
permissions" and remove "Authenticated Users" from every folder and ALL
subfolders and files?

Is there a way I can keep this from happening when I create a new user in AD
Users and Computers?
I would remove "Authenticated Users" from C:\User but then my users couldn't
get to their home folders. Any input is welcomed.


TIA,


Clayton

 

[Guest]

If it’s just the users folder those permissions are fine.

When you create a new AD user put the path for there home folder as:
\\server\share\%username% and AD will create the users folder and set the
appropriate permissions on that folder.

You can also use a group policy to do that as well.