Davie

Hello all. Let me set the scene which i hope will give a better perspective of what i'm after.

When we set up users in Active Directory, the first time the user logs on, the have a 2 directories set on dedicated servers.

The first one is their profile directory (/profile$/<username>)
The second one is their home Directory, or My Documents in this case (/home$/<username>)

Now when we remove a user from AD, all is well, but these directories remain.

I currently have to manually delete these directories, which in itself isn't a hassle, but i have to add explicit permissions to the directory and the ntuser.pol file located in the /profile$/<username> directory.

DOes anyone know of a tool where i can delete these directories without going into every one of them individually and setting permissions to allow me to delete them?

Thanks in advance.

David

David_Wallis

Set Your permissions on the parent folder and check the inheritance options..

Then the new folders should be inheriting the permissions from the parent folder+ the explicit permissions.

You could also write a script to find users in AD match to the folder, if it doesnt exist use something like cacls or takeownership of the folder then delete it.. (move it would be a better bet!)

ChristianR

iTrader: (1)

in the domain policy, you can click a box that allows any new profile directorys that the system creates to automatically assign domain admins to it..

Davie

Hi,

I used group policy in the end and it works a treat for newly created ones.

Cheers christian!