newbie: restrict permissions for home folder

[Tim Moor]

dear ad gurus,
i have mapped a home folder for all users in my domain through the ad users
and computers gui (home folder: connect z: to \\server01\home\%username%). i
found out, that this autocreated home folder is open for all other users as
well (ntfs-permissions). i'd prefer that the home folder ist available for
the user and for administrators exclusivley. any ideas ? do i have to change
permissions / inheritance on the home-share ?

thanx alot
tim

 

[JMS]

Hello Tim

You've to take ownership of the folder in question ("home") Properties ->
Advanced -> Owner, then select the option Replace owner on subcontainers to
the Administrator Account, then go to the permissions tab and give
permissions to the users group that you want to have access and the
Administrators Group.

The problem is that when a profile is automatically created for the 1st time
the system takes ownership of the files and gives permissions only to the
user that's being created. So any newly profile created after that is
created with permissions only to the user.




After