Maystyle :
Admin : New post
Guestbook
Local
media
Catergories
Recent Articles
Recent Comments
Recent Trackbacks
Calendar
Tag
Archive
Link
Search
 
  Some tools for management the terminal service environment. 
작성일시 : 2008. 12. 26. 12:14 | 분류 : Windows Server/Terminal Service

How can we creating Active Directory users and then modifying Their Terminal Service Profiles and then modifying their repository's NTFS permission?

Commonly I create users using a dsadd. But the dsadd does not support editing the terminal service profile.
( DSADD Usage is in here : http://technet.microsoft.com/en-us/library/cc753708.aspx )
Ordinary the terminal service profile were configured by the Group Policy's computer configuration section.

image

But if you want to set in user's properties panel, using the tscmd would be a one of the several choices.
The tscmd has a limitation that it does not support several commands at once.
I will edit the user's Profile Path and Network connected Terminal Services Home Folder.
For edit user's terminal services profile, you could command 3 times.

Syntax : tscmd <Server> <User> <Setting> [New Value]
For applying all Computers in Active Directory, you could set the first parameter to "Domain Controller's name"

image 
(Picture : Terminal Services Profile Setting Panel)

1. First Set the Profile Path
C:\Documents and Settings\Administrator\Desktop\tscmd>tscmd ca-2k3 testuser TerminalServerProfilePath \\CA-2k3\\C$\%username%

image

2. Second Set the Terminal Service Home Folder
C:\Documents and Settings\Administrator\Desktop\tscmd>tscmd ca-2k3 testuser TerminalServerHomeDir \\CA-2k3\\C$\%username%

image

3. Third Set the Terminal Server Home Folder Letter
C:\Documents and Settings\Administrator\Desktop\tscmd>tscmd ca-2k3 testuser TerminalServerHomeDirDrive H

image

4. Fourth Done the Setting

image

You may be want to create a Folders for the user.
Already you made a home folder but you would have a experience of some permission problem.

You can configure the Folders permission at a 1 line command.
SubInACL (http://support.microsoft.com/kb/825751)

cscript xcacls.vbs C:\test\ownerShip\ /E /T /G CAMig\testuser:F

image

You can allow the full control for user easily.
It also support the take owner ship by parameter /O, but it doesn't work in my case.
So I introduce the another tool named SubInACL

subinacl /file c:\test /setowner=camig\testuser

image

[Downloads]
TSCMD : http://www.systemtools.com/cgi-bin/download.pl?tscmd
Xcacls : http://www.microsoft.com/downloads/details.aspx?FamilyID=0ad33a24-0616-473c-b103-c35bc2820bda&amp;DisplayLang=en&displaylang=en
SubInACL : http://www.microsoft.com/downloads/details.aspx?familyid=e8ba3e56-d8fe-4a91-93cf-ed6985e3927b&displaylang=en
dsadd, dsmod : Built in the Windows Server

|