Hi Everyone,

I've searched through the newsgroups re my script with no luck at all. What
I'm looking at doing is granting a user the modify NTFS permission on their
profile folder after it has been created. The users name is referenced in a
variable called userName for example, so basically, I would like to assign
the modify NTFS permission to the user that is referenced by the variable
userName. This will be used for all our new users that are created from this
point onwards.

Many thanks in advance.
S

On Sep 18, 5:48 am, SSB <S...@discussions.microsoft.com> wrote:
> Hi Everyone,
>
> I've searched through the newsgroups re my script with no luck at all. What
> I'm looking at doing is granting a user the modify NTFS permission on their
> profile folder after it has been created. The users name is referenced in a
> variable called userName for example, so basically, I would like to assign
> the modify NTFS permission to the user that is referenced by the variable
> userName. This will be used for all our new users that are created from this
> point onwards.
>
> Many thanks in advance.
> S

What type of script are you using, that you have the variable
username? You could most likely use xcacls to modify the perms on
each folder.

see http://support.microsoft.com/kb/318754

pooradmin.com

"JakeDAHS" <jskiba99@gmail.com> wrote in message
news:1190176554.859647.12300@w3g2000hsg.googlegrou ps.com...
> On Sep 18, 5:48 am, SSB <S...@discussions.microsoft.com> wrote:
>> Hi Everyone,
>>
>> I've searched through the newsgroups re my script with no luck at all.
>> What
>> I'm looking at doing is granting a user the modify NTFS permission on
>> their
>> profile folder after it has been created.

I'm not sure why you'd want to reduce the permissions from FULL to MODIFY,
but...

How do you want to run this script - remotely from and admin account, or
locally in, say, the logon script?

>> The users name is referenced in a
>> variable called userName

Do you mean the environment variable %USERNAME%? If so, something like this
might work (on XP and w2k3):

cacls %userprofile% /e /c /g %userdomain%\%username%:C

It seems to me, however, that this would add a Change ACL but would not
remove the default Full setting. Perhaps you would need to revoke the user's
rights first. Unfortunately, though, if this script were being run by the
user, taking away Full access would make it difficult for the same account
to grant itself Change access.

/Al

>> for example, so basically, I would like to assign
>> the modify NTFS permission to the user that is referenced by the variable
>> userName. This will be used for all our new users that are created from
>> this
>> point onwards.
>>
>> Many thanks in advance.
>> S
>
> What type of script are you using, that you have the variable
> username? You could most likely use xcacls to modify the perms on
> each folder.
>
> see http://support.microsoft.com/kb/318754
>
> pooradmin.com
>