'Smart' permissions / permissions based on user account name

is there method / tool creating smart permissions........ mean is:

we school, , each year our pupils move year. pupils in ou year group, , each user 'area' (their personal store, mapped z drive) in folder named after year group also. each year need move pupils next ou up, , move folders work stored , change permissions too.


pupils should allowed access own folder (which has same name logon name) - there quick / effective way this? folders pupils work stored has same name logon name.

thanks hints etc.

hi,

please note, goal complex, may need several scripts plus manual operation. there several ntfs permission tools modify file/folder permission. can write script simplify operation.

how use xcacls.vbs modify ntfs permissions
http://support.microsoft.com/kb/825751

use cacls.exe view , manage windows acls
http://articles.techrepublic.com.com/5100-10878_11-1050976.html
please note: since web site not hosted microsoft, link may change without notice. microsoft not guarantee accuracy of information.

let’s assume there parent folder pupils’ folder "pupils". pupils’ folders "pupils\name"

need remove inheritance permission pupils folder:
xcacls path\pupils /i remove

after that, assign permission , remove unnecessary permission accordingly.

xcacls path\pupils\nmae  /g user:perm;spec  

detailed  xcacls document, please refer article below.

if customize script, suggest initial new post in official scripting guys forum! further support there. best resource scripting related problems.

convenience, have list link followed.

official scripting guys forum!
http://social.microsoft.com/forums/en-us/itcg/thread/34ed6cba-7698-4aa8-b13c-8693081296ef

thanks.

---

posting provided "as is" no warranties, , confers no rights.

Windows Server  >  Security