Default Perms for Home Folders

[Chris]

I have been trying to find out a way to modify the
default permsissions that are applied when creating a
home folder in ad.

For example:

In Windows 2000 - By default when you create a user and
set the home folder path to U:\\servername\share\%
username% the folder is created with Administrators and
the user with full control. (Does not inherit perms)

In Windows 2003 (or XP w/2k3 tools) - By default when you
create a user and set the home folder path to
U:\\servername\share\%username% the folder is created
with INHERITED permissions and adds the user and
administrators.

The MS doc "817009: The Default Permissions for Home
Folders in Windows 2000 and Windows Server 2003 Are
Different" covers this.

http://support.microsoft.com/default.aspx?scid=kb;en-
us;817009

The solution is listed as use Windows 2000 AD.

Does anyone know the way to modify this behavior?? In
Windows 2000 or Windows 2003.

I would like to specify the accounts to assign for
example - ONLY the user and the backup account.

Any help or a point in the place to look would be
appriciated.

 

[Jerold Schulman]

I have been trying to find out a way to modify the
default permsissions that are applied when creating a
home folder in ad.

For example:

In Windows 2000 - By default when you create a user and
set the home folder path to U:\\servername\share\%
username% the folder is created with Administrators and
the user with full control. (Does not inherit perms)

In Windows 2003 (or XP w/2k3 tools) - By default when you
create a user and set the home folder path to
U:\\servername\share\%username% the folder is created
with INHERITED permissions and adds the user and
administrators.

The MS doc "817009: The Default Permissions for Home
Folders in Windows 2000 and Windows Server 2003 Are
Different" covers this.

http://support.microsoft.com/default.aspx?scid=kb;en-
us;817009

The solution is listed as use Windows 2000 AD.

Does anyone know the way to modify this behavior?? In
Windows 2000 or Windows 2003.

I would like to specify the accounts to assign for
example - ONLY the user and the backup account.

Any help or a point in the place to look would be
appriciated.

Try the technique from tip 3471 in the 'Tips & Tricks' at http://www.jsiinc.com

Jerold Schulman
Windows: General MVP
JSI, Inc.
http://www.jsiinc.com