Solved

Active Directory Users personal folders auto rename

Posted on 2011-03-16
6
782 Views
Last Modified: 2012-05-11
When a new user is created in Active directory, a private users folder is auto created and mapped to the user as "U:\"  where "U" = the user name.
recently, a group of about 10 % of the user base is renaming the folders from the users name to "My Documents".

The users mapped drives still work, the only confusion is when administrators try to find the folder for an individual using windows explorer or other search methods.
0
Comment
Question by:wlasner
  • 3
  • 3
6 Comments
 
LVL 4

Expert Comment

by:bigstyler
ID: 35148388
Hello,

give only the "List Folder Permission" for your user in the root of his directory. And Then give the "Modify" right on the subfolder.

The user will not be able anymore to change the root folder name.
0
 

Author Comment

by:wlasner
ID: 35148451
The user is not changing the name, it is changing on its own.....
0
 
LVL 4

Expert Comment

by:bigstyler
ID: 35148577
Oh ok !
This is a problem with desktop.ini file that is interpreted by Windows 7 from your admin computers.

Do you have a desktop.ini file in the root folder ? (choose to display hidden and system files).

If yes, please modify the security of the file to grant only the right to deny the right for your admins.
Then they will be able to display the folder correctly.

You can run this with a script like :

%windir%\system32\icacls.exe %homedrive%\Desktop.ini /deny "Domain Admins":r
%windir%\system32\icacls.exe %homedrive%\Desktop.ini /deny Administrators:r
%windir%\system32\icacls.exe %homedrive%\Desktop.ini /deny "Other Admin Groups":r


0
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 

Author Comment

by:wlasner
ID: 35149105
There is a destop.ini file.  can you please explain more detail on what needs to be done and where the script should be run.
thanks
0
 
LVL 4

Accepted Solution

by:
bigstyler earned 500 total points
ID: 35149264
Just to be sure and do it easily just directlry modify the ACL of the desktop.ini for a user.

Deny read access to it for everyone and then try to reproduce the issue :)
0
 

Author Comment

by:wlasner
ID: 35296529
OK - deny admin and domain admin worked - thank you.
0

Featured Post

On Demand Webinar - Networking for the Cloud Era

This webinar discusses:
-Common barriers companies experience when moving to the cloud
-How SD-WAN changes the way we look at networks
-Best practices customers should employ moving forward with cloud migration
-What happens behind the scenes of SteelConnect’s one-click button

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Is your Office 365 signature not working the way you want it to? Are signature updates taking up too much of your time? Let's run through the most common problems that an IT administrator can encounter when dealing with Office 365 email signatures.
This article demonstrates probably the easiest way to configure domain-wide tier isolation within Active Directory. If you do not know tier isolation read https://technet.microsoft.com/en-us/windows-server-docs/security/securing-privileged-access/s…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

756 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question