Setting folder permissions...

Question

I'm wondering, in some sort of magic trickery, if a folder can have permissions set
AS the user signs on.

Each time a new user logs onto a pc, it creates a folder, user\appdata\local. I wonder if there is some script that would add permissions to each folder as one became available.
GPO is out.

I have a run-once registry change that turns off Caps on Panasonics, just once, per user.
I kept getting it on the first time, then the next sign on as the same person turned it off.
I also don't know what all the Tags refer to at the bottom, so this may not be the right area to post this.
So I have that working. It took way too much thought to get it working.

This folder is only created as a user signs on and has a particular program installed.
Ex: Office is on the pc. A new user signs on and it activates their suite. But if the log onto another pc w/o Office, it is not even invoked.

Just wondering.....

Answer 1

Hi,

Thanks for posting on our forum!

Firstly, I think your question is related to storage and maybe a little bit of Active Directory and I work for storage, so I think I can try to help you in storage part.

Secondly, I am not sure if I understand your requirement correctly: each time when your users log in, a folder will be created in your local drives and everyone can get access to the folder. Am I right?

Your Environment and demand: you have many users and your own computer is the Domain controller for the whole group, and each user account is added into your domain, then you want each user can create their own folder in your local drives and store their files in their own folders. Besides, you can grant permissions to all of your users to get access to these folders.

If the above description is correct. Then you can just use NTFS permissions or work folder to achieve your goal.

1. NTFS permission. This is probably the easiest way to configure user access to your local drives while keeping your local drives safe from other people. You just need to add the user accounts that you want them to access local drives. See these articles:
   https://www.varonis.com/blog/ntfs-permissions-vs-share/

https://blog.netwrix.com/2018/05/03/differences-between-share-and-ntfs-permissions/

(Please note: the information posted on this link is hosted on a third-party server. Microsoft does not guarantee the accuracy or effectiveness of the information.)

2) Working folder. It is a Windows Server-based file server role service that provides users with a consistent way to access their work files from their computers and devices. See this article:
https://learn.microsoft.com/en-us/windows-server/storage/work-folders/work-folders-overview

Besides, if you decide to adopt any of my suggestions, keep in mind that you need to format your local drives as NTFS.

Thanks for your support! And I would appreciate it if you could help me Accept Answer to support my work.

BR,
Joan

---

If the Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Hi,

Thanks for your rely!

Firstly, I am quite suprised of what you did, it was a really novel way and is beyond my knowledge. Our forum can only try our best to give you some general resolutions provided by OFFICAL Microsoft tools and methods.

Secondly, in view of your demands, I still recommend you with some customized scripts. But your method can be investigated to some extent, and I will keep this blog open to the public, hope there will be some professionals in your field to leave their suggestions. In addition, I will keep track on this issue and will go to ask some of our senior engineers about your condition.

Thanks for your understanding! And I would appreciate it if you could help me Accept Answer to support my work. This action can alsp help your blog automatically be put on top of our forum, in which way can people who are professional in this issue get access to this blog more quickly.

Have a nice day! : )

BR,
Joan

---

If the Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 3

As time permits, I will test the run-once for the folder, I'm just not sure how to give permissions to a folder "as" it gets created (when the user logs on).

We manually sign on as the user, then go way into a folder path and give that inner folder permissions for authenticated users. Hard to do when the folder isn't there yet.