How can we creating Active Directory users and then modifying Their Terminal Service Profiles and then modifying their repository's NTFS permission?
Commonly I create users using a dsadd. But the dsadd does not support editing the terminal service profile.
( DSADD Usage is in here : http://technet.microsoft.com/en-us/library/cc753708.aspx )
Ordinary the terminal service profile were configured by the Group Policy's computer configuration section.
But if you want to set in user's properties panel, using the tscmd would be a one of the several choices.
The tscmd has a limitation that it does not support several commands at once.
I will edit the user's Profile Path and Network connected Terminal Services Home Folder.
For edit user's terminal services profile, you could command 3 times.
Syntax : tscmd <Server> <User> <Setting> [New Value]
For applying all Computers in Active Directory, you could set the first parameter to "Domain Controller's name"
(Picture : Terminal Services Profile Setting Panel)
1. First Set the Profile Path
C:\Documents and Settings\Administrator\Desktop\tscmd>tscmd ca-2k3 testuser TerminalServerProfilePath \\CA-2k3\\C$\%username%
2. Second Set the Terminal Service Home Folder
C:\Documents and Settings\Administrator\Desktop\tscmd>tscmd ca-2k3 testuser TerminalServerHomeDir \\CA-2k3\\C$\%username%
3. Third Set the Terminal Server Home Folder Letter
C:\Documents and Settings\Administrator\Desktop\tscmd>tscmd ca-2k3 testuser TerminalServerHomeDirDrive H
4. Fourth Done the Setting
You may be want to create a Folders for the user.
Already you made a home folder but you would have a experience of some permission problem.
You can configure the Folders permission at a 1 line command.
SubInACL (http://support.microsoft.com/kb/825751)
cscript xcacls.vbs C:\test\ownerShip\ /E /T /G CAMig\testuser:F
You can allow the full control for user easily.
It also support the take owner ship by parameter /O, but it doesn't work in my case.
So I introduce the another tool named SubInACL
subinacl /file c:\test /setowner=camig\testuser
[Downloads]
TSCMD : http://www.systemtools.com/cgi-bin/download.pl?tscmd
Xcacls : http://www.microsoft.com/downloads/details.aspx?FamilyID=0ad33a24-0616-473c-b103-c35bc2820bda&DisplayLang=en&displaylang=en
SubInACL : http://www.microsoft.com/downloads/details.aspx?familyid=e8ba3e56-d8fe-4a91-93cf-ed6985e3927b&displaylang=en
dsadd, dsmod : Built in the Windows Server