Scripting Problem.

[daskreis]

Hello,

We have a windows 2003 server and windows xp users, we want to prohibit users from saving any files in their profile.

We need a logon script that modify the NTFS permission for each login in user to just read and execute.

The script will be applied on the domain to affect all computers.

Note: roaming profiles are not used, so the users 's profiles are stored locally on their computers.

Help please.

[Skynet]

You are a company, no ? Call your administrator of network...

[e-didier]

Note: roaming profiles are not used, so the users 's profiles are stored locally on their computers.

It is not a good idea.

Good day.
Didier

[daskreis]

Hello,

The administrator does not know how to resolve this problem .


I know that with roaming profiles we can resolve this problem by apllying
the ntfs permission on the server, but we need to set the path on hundred of accounts .

[Ask to Old Man]

Hello,

The administrator does not know how to resolve this problem ...

It's a joke. He must learn quickly "How to"!!

[w0lverine]

I'm not sure you can script such modifications in windows. Maybe in C or C++ but chances are that you'll have to modify your network architecture. It'll probably be safer and quicker.

[daskreis]

Hello,

The solution is changing to roaming profiles and set the permissions on the shared folder that will contains the profiles (CREATOR = read and execute), the profiles will be sent to user and keep the permissions .


Information : in windows server 2003 you can select all users on one time, right clic, properties, profil, and set the path of roaming profile like that :

ServernameSharename\%username%, the path will be set automatically to each user with his username.

Thank you.

[e-didier]

The solution is changing to roaming profiles and set the permissions on the shared folder that will contains the profiles ...

I was thinking the same but you said you won't use roaming profiles...

Good evening.
Didier

[daskreis]

Hello,

I told that because i was not knowing that we can select all users on one time and set the path.

anyway i tried the solutions and it does not work, the roaming profile is copied to the local computer with full control permissions regardless of what i set in the server.

Thanks.

[e-didier]

Hello,

I told that because i was not knowing that we can select all users on one time and set the path.

anyway i tried the solutions and it does not work, the roaming profile is copied to the local computer with full control permissions regardless of what i set in the server.

Thanks.

Happy it is solved for you.

Have a nice day.
Didier