home directory permissions

Hi all,

Our users are initially set up with a home directory on our windows
2000 domain controller. We do this as explained in
http://support.microsoft.com/?kbid=320043. I know by design, when this
is done, the permissions are set to administrators - full control and
%username% full control. This is working just fine. My question is:
Is there a way to change those default permissions or groups? Can it
be set up to give full control to the user and administrator and
inherit permissions from the parent directory? The reason is, I would
like another group (Help Desk) to have read permissions on all home
directories. I can do this manually for each users home directory with
the administrator account but having it set up by default would be
preferred.

Thanks in advance.

.

Relevant Pages

  • Re: File Permissions
    ... The default full control for everyone on the root folder is a security issue ... back to default ntfs permissions. ... particularly for the administrator account, ...
    (microsoft.public.win2000.security)
  • Re: Deny Permission for Internet Explorer
    ... If an administrator wanted stricter control of access to the computer's ... Users, Power Users, and Administrators. ... are used to assign permissions. ...
    (microsoft.public.win2000.security)
  • Re: XP Pro "search" feature seems to ignore file permissions
    ... >> folder and give him full control of it and deny full control to all ... >> administrator account, ... directory permissions as a so-called "power user," I suppose -- I've ...
    (microsoft.public.security)
  • Re: After changing Share permissions, Even admin is access denied
    ... Sounds like you need to change the owner on the top level that fails to Administrator. ... make sure the Administrator account has Full control in the NTFS permissions. ...
    (microsoft.public.windows.server.sbs)
  • Re: SP2 Will Not Install
    ... Everyone is the only one listed in Permissions. ... is Administrator. ... I am Administrator and Judy. ... Control Panel, it has Judy Computer Administrator. ...
    (microsoft.public.windowsupdate)