Solved

Windows 2008 R2:  Delegate Control - Access Denied Creating Home Directory

Posted on 2010-09-09
3
1,346 Views
Last Modified: 2012-05-10
I've delegated control to a couple of users for the maintaining of user accounts.  I've granted them just about everything I can think of.   They're able to create/modify new users okay, but when it comes time for AD to create the home directory, they recieve an "Access Denied" message for the path to the newly created folder and then the folder isn't created.  The new user account appears to be okay though (just no home directory).

The ID of the user creating the accounts has Full Permissions to the share where the folder is to be created.

I don't get it?
0
Comment
Question by:januismer
  • 2
3 Comments
 
LVL 39

Accepted Solution

by:
Krzysztof Pytko earned 500 total points
ID: 33643931
On network share you should add Everyone group "Full rights" or Contributor rights. Also on security (NTFS) tab you should add users or their group with "Modify" rights. Then they should be able to create home drives.
0
 
LVL 1

Author Comment

by:januismer
ID: 33645945
Thank you, thank you, thank you!  That did the trick!

I had my Share permissions set to Read, change only.  (Not Full Control)
0
 
LVL 39

Expert Comment

by:Krzysztof Pytko
ID: 33647688
You're welcome :)
0

Featured Post

Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Normally after a failure of Domain Controller, when promoting new DC the DC is renamed, we will discuss the options in Dcpromo to re-create the DC with the same name. Scenario: You are a small IT shop with two Domain Controllers (Domain Contr…
Redirected folders in a windows domain can be quite useful for a number of reasons, one of them being that with redirected application data, you can give users more seamless experience when logging into different workstations.  For example, if a use…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…

773 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question