Solved

How to assign login scripts to users without having to do it one by one

Posted on 2010-11-11
8
316 Views
Last Modified: 2012-08-13
We had an issue where our student users lost permissions to their network drives. It seems the only way I have been able to re-grant them access to their "home folder" is through AD, one at a time. I would change the path of the login script for that user, by back spacing one character, retyping in the correct path, and then it would say "The folder already exists, do you want to grant Full Access to this folder".

Is there are a way to grant rights to a group of users to their home directory without having to do it one at a time? We only want each user having rights to their own home directory, and not anyone elses.

We have tried changing the rights for the root folder, and it shows that the container the users are in have Full Control of the root folder "Students", then each child folder is each student's home folder. But when I check the security permissions for each individual folder, that specific user is not listed as having rights. It would be nice to do this all at once instead of one at a time.

0
Comment
Question by:danisham
  • 4
  • 3
8 Comments
 
LVL 27

Expert Comment

by:KenMcF
ID: 34111394
You can script this using xcalcs.vbs or some other tool.
http://support.microsoft.com/kb/825751

Also from with the GUI you can select multiple users and for their home drive type

\\servername\share\%username%

0
 
LVL 27

Expert Comment

by:KenMcF
ID: 34111411
Reading your question it sounds like you are setting permissions to the users home drive, if you want login script you can select multiple users through the GUI like I mentioned before or use a GPO

http://www.windowsitpro.com/article/tips/jsi-tip-8215-how-do-i-configure-a-logon-script-via-group-policy-.aspx
0
 
LVL 11

Assisted Solution

by:Tasmant
Tasmant earned 200 total points
ID: 34111548
I think someone did change on the root folder where home folder are stored and clicked on Replace security settings for all child items ... So all the security for each Home directory has been reset.

To reset, you could use the name of each sub directory in your root folder and reset perm based on the name of each subfolder, as each subfolder should be the name of an user.

for /F "tokens=4* skip=7" %i in ('dir Drive:\RootFolder /A:D') do xcacls "Drive:\RootFolder\%i" /F /S /T /G "%i":F /I enable /O "%i"

Juste replace Drive:\Rootfolder with the path of the folder where all your Home are stored.
Be sure to have xcacls in the current directory (see KenMcF comment)
0
U.S. Department of Agriculture and Acronis Access

With the new era of mobile computing, smartphones and tablets, wireless communications and cloud services, the USDA sought to take advantage of a mobilized workforce and the blurring lines between personal and corporate computing resources.

 

Author Comment

by:danisham
ID: 34111683
It seems in the link provided by KenMcF that the xcacls.vbs script is only compatible with Windows 2000, XP, and 2003. We have Server 2008R2.
0
 

Author Comment

by:danisham
ID: 34111712
KenMcF, we have done it via GUI in your first respone. It did populate the path to their home drive but did not re-assing their permissions.
0
 
LVL 27

Accepted Solution

by:
KenMcF earned 300 total points
ID: 34111760
0
 
LVL 27

Expert Comment

by:KenMcF
ID: 34111775
What are the permissions set to on the root folder?
Does the users you are using to set the homedrive path have rights to the folders?
0
 

Author Closing Comment

by:danisham
ID: 34111794
Thank you for the documentation on the script I can use. This will take a little bit for me to research and implement, but it seems that this is the answer I was looking for.
0

Featured Post

Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article outlines the process to identify and resolve account lockout in an Active Directory environment.
This article describes my battle tested process for setting up delegation. I use this process anywhere that I need to setup delegation. In the article I will show how it applies to Active Directory
This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…

749 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question