[Webinar] Streamline your web hosting managementRegister Today

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 321
  • Last Modified:

How to assign login scripts to users without having to do it one by one

We had an issue where our student users lost permissions to their network drives. It seems the only way I have been able to re-grant them access to their "home folder" is through AD, one at a time. I would change the path of the login script for that user, by back spacing one character, retyping in the correct path, and then it would say "The folder already exists, do you want to grant Full Access to this folder".

Is there are a way to grant rights to a group of users to their home directory without having to do it one at a time? We only want each user having rights to their own home directory, and not anyone elses.

We have tried changing the rights for the root folder, and it shows that the container the users are in have Full Control of the root folder "Students", then each child folder is each student's home folder. But when I check the security permissions for each individual folder, that specific user is not listed as having rights. It would be nice to do this all at once instead of one at a time.

0
danisham
Asked:
danisham
  • 4
  • 3
2 Solutions
 
KenMcFCommented:
You can script this using xcalcs.vbs or some other tool.
http://support.microsoft.com/kb/825751

Also from with the GUI you can select multiple users and for their home drive type

\\servername\share\%username%

0
 
KenMcFCommented:
Reading your question it sounds like you are setting permissions to the users home drive, if you want login script you can select multiple users through the GUI like I mentioned before or use a GPO

http://www.windowsitpro.com/article/tips/jsi-tip-8215-how-do-i-configure-a-logon-script-via-group-policy-.aspx
0
 
TasmantCommented:
I think someone did change on the root folder where home folder are stored and clicked on Replace security settings for all child items ... So all the security for each Home directory has been reset.

To reset, you could use the name of each sub directory in your root folder and reset perm based on the name of each subfolder, as each subfolder should be the name of an user.

for /F "tokens=4* skip=7" %i in ('dir Drive:\RootFolder /A:D') do xcacls "Drive:\RootFolder\%i" /F /S /T /G "%i":F /I enable /O "%i"

Juste replace Drive:\Rootfolder with the path of the folder where all your Home are stored.
Be sure to have xcacls in the current directory (see KenMcF comment)
0
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

 
danishamAuthor Commented:
It seems in the link provided by KenMcF that the xcacls.vbs script is only compatible with Windows 2000, XP, and 2003. We have Server 2008R2.
0
 
danishamAuthor Commented:
KenMcF, we have done it via GUI in your first respone. It did populate the path to their home drive but did not re-assing their permissions.
0
 
KenMcFCommented:
0
 
KenMcFCommented:
What are the permissions set to on the root folder?
Does the users you are using to set the homedrive path have rights to the folders?
0
 
danishamAuthor Commented:
Thank you for the documentation on the script I can use. This will take a little bit for me to research and implement, but it seems that this is the answer I was looking for.
0

Featured Post

Never miss a deadline with monday.com

The revolutionary project management tool is here!   Plan visually with a single glance and make sure your projects get done.

  • 4
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now