Batch Process to Create and Grant Access to Home Directories (155449)

MORE INFORMATION

Here is an example of a batch process that will create the home directory and the share, and will assign permissions. This example uses RMTSHARE, from the Windows NT 3.51 Resource Kit.

   md c:\users\<username>
   rmtshare \\<HomeServer>\<username>$=c:\users\<username>

         /grant <username>:f /grant administrator:f
         /remove everyone
				

NOTE: There are two commands here. The first command starts with md. The second command starts with rmtshare, and should be on one line in the batch file.

The first command creates the directory for the user where <username> represents the user. An environment variable could be used here to represent the user. Usernames could then be pulled from a list of users created by ADDUSERS -D, for instance.

The second command creates the share on <homeserver>. The dollar sign ($) at the end of the user name share name creates a hidden share. The /GRANT switch gives full control to the user <username> and full control to the administrator account. The /REMOVE switch removes permissions from the Everyone Group. Again, the user could be respresented by an environment variable.

NTFS permissions could be modified in the same batch process through the CACLS command.

The syntax of the RMTSHARE command is:

 RMTSHARE \\server
          \\server\sharename
          \\server\sharename=drive:path [/USERS:number | /UNLIMITED]
                               [/REMARK:"text"]
                               [/GRANT [user[:perm][ /GRANT user[:perm]]]]
                               [/REMOVE user]
          \\server\sharename=printername /PRINTER [/USERS:number | /UNLIMITED]
                               [/REMARK:"text"]
                               [/GRANT [user[:perm][ /GRANT user[:perm]]]]
                               [/REMOVE user]
          \\server\sharename [/USERS:number | /UNLIMITED]
                               [/REMARK:"text"]
                               [/GRANT [user[:perm][ /GRANT user[:perm]]]]
                               [/REMOVE user]
          \\server\sharename /DELETE
				

NOTE: If a sharename or path contains spaces, it should be enclosed in quotes: \\server\"with space"="c:\with space"