Markdmac Script, Folder Redirection and Synchronization Problem

[ojosh]

Hi All,

MY CONFIGURATION: I used markdmac script to map users to Network Drive (U:\) on the file sever.

I also used FOLDER REDIRECTION from MS group Policy to redirect users' "My Documents" folder to the mapped drive (U:\).

Thirdly I used OFFLINE FILES AND FOLDERs to syncronize "My Document" folder to be made available offline.

MY PROBLEM: I discovered that when users logon to the domain, they could READ all "My Documents" folders that belong to other users on the network but could not open them.

WHAT I WANT: I want the users to only READ and WRITE to their 'My Documents" folder and all other belonging to other users be hidden from them. In other world, I don't want user1 to see user2 "My Document".

Thanks

 

[kmkeshav]

What is the path specified in the Group Policy, to which My Documents folder has to be redirected?

If you have used the %USERNAME% in the path, a folder for the user is created automatically based on the user name and his My Documents folder will be redirected to this folder. Only the user will have access to this folder.

Example: \\<server-name>\<share-name>\%username%

 

[markdmac]

This is a matter of properly configuring your NTFS permissions and setting shares at the appropriate level so users can not see other users data. Really has nothing to do with the script other than where you point hte users to within it.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

 

[ojosh]

Thanks Mark and Kmkeshav,

I have gone to the profile dialogue box of individual users property box and configure their home Folder to connect drive U:\ to \\servername\sharename\username and it works.

I think the above method is too manual, I will try and amend the NTFS permision and see what happens.

Once again thank you all.

Leke

 

[markdmac]

FYI if you do some searching in the vbscript forum you will find I posted a solution using xcacls a few weeks back regarding this topic so you can do all the folder permissions with a single script.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

 

[ojosh]

Thank you Mark.

Your posts has being propelled my status in my office, they see me as a pro.

Another issue here pls. I also used the script to deploy/install two printers on the LAN.

How can I edit the script so that a Adminstration staff has AdminPrinter as default and Business Development staff has BusDevPrinter as default once.

I dont want systems to prompt them to select default printer whenever they logon to their machines.

Once again, thanks for your kind support.

Leke

 

[markdmac]

In the section of the login script for checking group memberships, add a group name of "Domain Admins" and add the printer there.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript