How to add NTFS permissions to enable users to create their own Documents folders on first login with Redirected Folders

Goal

To enable users to logon to a domain account and for redirected folders to automatically create their folders during logon with the correct permissions to enable them to work as expected.

Solution

In order to have users be able to create their own Documents areas we need to set the following permissions on the root folder where their Documents folders are going to be stored.

For example, if we are creating a root folder for Student Documents folders to reside we might create the following structure –

D:\Users\Students\Intake2021\%username%

In this scenario the root folder for all students joining the school in Intake year 2021 would be Intake2021 highlighted red above.

To achieve out goal the following permissions would be required.

• The Intake2021 security group the students are members of will require Create folder / append data for This folder only in addition to the standard Read permissions as shown below.

• CREATOR OWNER will require Full Control to Subfolders and Files only which is the default for new disks providing you haven’t changed any permissions at the root of the drive.

• SYSTEM will require Full Control to This folder, Subfolders and Files which is the default for new disks providing you haven’t changed any permissions at the root of the drive.

• Administrators will require Full Control to This folder, Subfolders and Files which is the default for new disks providing you haven’t changed any permissions at the root of the drive.

Now when the user logs in you will see that their home folder will be created and populated.

If you have verbose output enabled on your login screen you will see “Applying Folder Redirection Policy” hang on screen for a few seconds, this is while the folders are being created.

Prerequisites

• Windows Server
• Redirected Folders Group Policies in place and setup – guide to follow, check back soon!

Known Fixes / Solutions

If you dont use the built in Administrator account you may find that you are unable to access the additional data drive when changing permissions if so follow this guide by The Rambling Techie to overcome this issue.

External Links

Access Denied to data drive for an Administrator – Server 2016 | The Rambling Techie