Folder Permissions and Active Directory

[lilcam]

Maybe it's something I missed but here's what i'm looking to do. I've been doing it the long way by right clicking each user's folder and giving them permission AND denying everyone else permission.

1 - D:\Faculty on PDC
2 - map as drive Z in the login script under Group Policy

LOGIN.BAT
net use z: \\servername\sharename\%username%

So, say I have a user with a logon name of csmith

The folder on the PDC is located at d:\faculty\csmith

What I've been doing is right click the csmith folder and giving her and the domain admins all rights. No one else has been added to the permissions list. Isnt there an easier way to do this? I have over 400 students (hence, 400 folders), and I cant imagine doing this for all 400 folders.

Also, is there a way to make the users save their documents to the map drive (aka their home directory?). Like, if they save something under notepad, their default directory would be drive Z and not C!

I didnt add anything to the user's profile under "Login Script." What I did was assign the login script in the group policy.

 

[CoolClark]

A batch file would be the best way to handle it. You could create the directory and set the permissions. Something like this:

md d:\faculty\%NewUser%
cacls d:\faculty\%NewUser% /T /G "MYDOMAIN\Domain Admins":F "MYDOMAIN\%UserName%":F

Save this to a batch file and run it from the server like this:

d:\nameofbatchfile.bat MyNewuser

If you want to get creative with excel you can add all your users to a spread sheet and concatenate the d:\nameofbatchfile.bat to each user and save that as another batch file.