Create a secure user home directory in Windows Server 2012 R2 Active directory
In File server
Create new share folder in File server "Home Folder"
Go to properties and share the folder and setup the security as shown in below pictures,
Remove everyone and add domain users full permission.
Then Go to security tab and remove all inheritance permission and only add required permission as shown below.
Add Domain users group as read & execute permission with "This only Folder" option.
And Creator Owner group as Full permission in " This folder ans Sub folders and Files "
In Active directory Server
Open Active Directory Users and Groups, the choose all users that you want to apply home folder. Enter properties,
On profile tab add share folder path as shown as below .
Done . :) To check the result, Login to any workstation machine with any of the user and go to my computer , there you will see mapped home folder with logged in user name.
In any Workstation Machine
And check the other folder permission as shown as below. All other folder should be access denied.
:)
No comments