Hello,
I need help to set share and ntfs permissions on Users home folder because I'm trying to map user home directories through GPO preference.
Required permissions on home and user directories:
Domain administrators will have full access on all directories.
Users will have full access on their own home directory.
Users will not be able to open/access other user's directories.
I Shared Home folder (\\Server\Home$) which contains user's directories. I manually have created user directories in Home folder matched with usernames because since I'm using GPO preference to map them so GPO will only map already created directories.
I have set following permissions on Home folder:
Shared permissions:
- System - Full Control
- Domain Admins - Full Control
- Everyone - Full
NTFS permissions: Also Removed permission inheritance
- CREATOR OWNER - Full Control (Apply onto: Subfolders and Files Only)
- System - Full Control (Apply onto: This Folder, Subfolders and Files)
- Domain Admins - Full Control (Apply onto: This Folder, Subfolders and Files)
- Everyone - Create Folder/Append Data (Apply onto: This Folder Only)
- Everyone - List Folder/Read Data (Apply onto: This Folder Only)
- Everyone - Read Attributes (Apply onto: This Folder Only)
- Everyone - Traverse Folder/Execute File (Apply onto: This Folder Only)
After setting above permissions GPO is not able to map their drives because user is also not able to access it's own directory share from client pc: \\server\home$\user
User directory is not accessible because I have manually created user directory on file server with domain administrator account that's why domain administrator is the directory owner and user cannot access it and can't be mapped with GPO. As Everyone is permission is set to "This folder only' and only Creator Owner have full access. Can anyone please help me to achieve this within my scenario?
Want to use GPO to map drives with above required permissions set.
Thanks