Go Premium for a chance to win a PS4. Enter to Win


Creating W2K User Accounts Faster?

Posted on 2004-10-26
Medium Priority
Last Modified: 2010-04-14
Whenever I create a new user account on the network, I manually create their user directory and manually assign the appropriate permissions.  Then I set up the user's computer and configure it to sync to this folder using MyDocuments.  Is there a way to set this up automatically with Windows 2000 server and Windows XP clients?
Question by:clayperez
  • 5
LVL 10

Expert Comment

ID: 12413204
Hi clayperez,
Well, if you want this to be uniform, meaning everyone essentially follows the same pattern, and assuming you are on a domain, you can use a Group Policy to accomplish this. I don't know how much experience you have with that but in the User Configuration>Administrative Templates> section of Group Policy there are policies which will allow you to do just that. Of course, there are other ways but if you are on a domain I think this is the most logical.

LVL 18

Expert Comment

ID: 12413411
"their user directory"

You can have AD autmatically setup each user's home directory.

In AD, when you add a user....you can simply right click on their account and go to "properties" and then the "profile" tab. Under "home folder" you can select a drive letter which is used as the letter of their drive mapping...then you type this as the path:


The only thing you need to have is setup a shared folder...in this case called HomeDir. The user's folder with full permissions to the user and admins will be setup when the user logs in.

Author Comment

ID: 12413455
luv2smile,  Does the folder actually have to be SHARED, or can it simply have the correct modify permissions associated with the %username% folder?

I try not to share folders on the server so that tey are not visible should someone open the server object in Network Neighborhood..
Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

LVL 18

Accepted Solution

luv2smile earned 150 total points
ID: 12413475
Then with group policy you can redirect their my documents folder to their "home directory" folder.

To do this:

User Config- Windows Settings- Folder Redirection- My Documents- then right click and select properties

Choose the basic setting- redirect everyone's folder to the same location

Then under target folder location, choose "redirect to user's home directory"

LVL 18

Expert Comment

ID: 12413491
Yes, the folder has to be shared. You can always hide shares by placing a $ after the name. These hide the shares from everyone except admins so they won't show up in network neighborhood.
LVL 18

Expert Comment

ID: 12413519
As long as you are not sharing from the root of your server, then sharing folders is perfectly fine. NTFS permissions provide excellent security to limit access.

You can limit access to the home directory folder to just admins and system. The correct permissions for the user's folders will be created automatically.
LVL 18

Expert Comment

ID: 12413579
Correction to my post above...the dollar sign even hides the share from admins...but of course admins can still connect to it.


Featured Post

Hire Technology Freelancers with Gigs

Work with freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely, and get projects done right.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
Transferring FSMO roles is done when an admin wants to split roles between certain Domain Controllers or the Domain Controller holding the Roles has been forcefully demoted using dcpromo / forceremoval
Are you ready to place your question in front of subject-matter experts for more timely responses? With the release of Priority Question, Premium Members, Team Accounts and Qualified Experts can now identify the emergent level of their issue, signal…
Loops Section Overview

916 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question