I've been asked by management to log IM chats. I've already got the logon script and gpo that will edit the registry keys and point the IM client to save the log files to a network share folder that is created when the logon script is run.
Now my concern is end users snooping around the network and finding this folder and reading everyone else's IM chats. Chances are slim that this will even be noticed but if one person finds it this could be a huge problem.
So I would like to know how to setup permissions on the log folder that will allow the script to run and create the user folder but set permission in a way that will only allow the user and domain admins to have access to their folder. The user folder should also allow the user with access to this folder to write but not view/read/delete/edit the log files it creates in this folder.