Help with security rights for Home directories

Archived from groups: microsoft.public.win2000.active_directory,microsoft.public.win2000.security,microsoft.public.windows.server.security (More info?)

I need to find out the security rights needed so that AD can create home
directories for newly created users on a windows 2000 server with the correct
security rights granted. The home directories were moved from one hard drive
to another and all current users rights are still working properly. However
when I create a new user, everyone has access to that users home directory.
And with much fiddling, the default security has changed. Any help would be
appreciated.

Archived from groups: microsoft.public.win2000.active_directory,microsoft.public.win2000.security,microsoft.public.windows.server.security (More info?)

Hi AD D,
This was helpful, thanks. quick question.
I thought even the admins couldn't get into the home directories, and I can.

Sorry if this is something easy, I'm a Novell guy learning this and
everything seems to be backwards.
garch


"The AD Designer" wrote:

> Hi Garch
>
> The home directory is set as part of the user object. You select the server
> and the share name as \\server\users\%username% Ensure only the administrator
> has access to the share (full control), account operators (full control) if
> you have a helpdesk, the user object is granted full control on the object
> once it has been created. Looks like you may have full control permission to
> everyone on the share "users"
>
> Regards
> Stephen
>
> "garch" wrote:
>
> > I need to find out the security rights needed so that AD can create home
> > directories for newly created users on a windows 2000 server with the correct
> > security rights granted. The home directories were moved from one hard drive
> > to another and all current users rights are still working properly. However
> > when I create a new user, everyone has access to that users home directory.
> > And with much fiddling, the default security has changed. Any help would be
> > appreciated.
> >