Solved

How to assign login scripts to users without having to do it one by one

Posted on 2010-11-11
8
315 Views
Last Modified: 2012-08-13
We had an issue where our student users lost permissions to their network drives. It seems the only way I have been able to re-grant them access to their "home folder" is through AD, one at a time. I would change the path of the login script for that user, by back spacing one character, retyping in the correct path, and then it would say "The folder already exists, do you want to grant Full Access to this folder".

Is there are a way to grant rights to a group of users to their home directory without having to do it one at a time? We only want each user having rights to their own home directory, and not anyone elses.

We have tried changing the rights for the root folder, and it shows that the container the users are in have Full Control of the root folder "Students", then each child folder is each student's home folder. But when I check the security permissions for each individual folder, that specific user is not listed as having rights. It would be nice to do this all at once instead of one at a time.

0
Comment
Question by:danisham
  • 4
  • 3
8 Comments
 
LVL 27

Expert Comment

by:KenMcF
ID: 34111394
You can script this using xcalcs.vbs or some other tool.
http://support.microsoft.com/kb/825751

Also from with the GUI you can select multiple users and for their home drive type

\\servername\share\%username%

0
 
LVL 27

Expert Comment

by:KenMcF
ID: 34111411
Reading your question it sounds like you are setting permissions to the users home drive, if you want login script you can select multiple users through the GUI like I mentioned before or use a GPO

http://www.windowsitpro.com/article/tips/jsi-tip-8215-how-do-i-configure-a-logon-script-via-group-policy-.aspx
0
 
LVL 11

Assisted Solution

by:Tasmant
Tasmant earned 200 total points
ID: 34111548
I think someone did change on the root folder where home folder are stored and clicked on Replace security settings for all child items ... So all the security for each Home directory has been reset.

To reset, you could use the name of each sub directory in your root folder and reset perm based on the name of each subfolder, as each subfolder should be the name of an user.

for /F "tokens=4* skip=7" %i in ('dir Drive:\RootFolder /A:D') do xcacls "Drive:\RootFolder\%i" /F /S /T /G "%i":F /I enable /O "%i"

Juste replace Drive:\Rootfolder with the path of the folder where all your Home are stored.
Be sure to have xcacls in the current directory (see KenMcF comment)
0
NAS Cloud Backup Strategies

This article explains backup scenarios when using network storage. We review the so-called “3-2-1 strategy” and summarize the methods you can use to send NAS data to the cloud

 

Author Comment

by:danisham
ID: 34111683
It seems in the link provided by KenMcF that the xcacls.vbs script is only compatible with Windows 2000, XP, and 2003. We have Server 2008R2.
0
 

Author Comment

by:danisham
ID: 34111712
KenMcF, we have done it via GUI in your first respone. It did populate the path to their home drive but did not re-assing their permissions.
0
 
LVL 27

Accepted Solution

by:
KenMcF earned 300 total points
ID: 34111760
0
 
LVL 27

Expert Comment

by:KenMcF
ID: 34111775
What are the permissions set to on the root folder?
Does the users you are using to set the homedrive path have rights to the folders?
0
 

Author Closing Comment

by:danisham
ID: 34111794
Thank you for the documentation on the script I can use. This will take a little bit for me to research and implement, but it seems that this is the answer I was looking for.
0

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This script can help you clean up your user profile database by comparing profiles to Active Directory users in a particular OU, and removing the profiles that don't match.
This article describes my battle tested process for setting up delegation. I use this process anywhere that I need to setup delegation. In the article I will show how it applies to Active Directory
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…

789 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question