Using user scoped group policy preferences, we are creating a home folder for new users on the server. This home folder inherits "CREATOR OWNER" permissions from the root home share. Now, we want to create a second folder under the Home folder called Scans. But, we want to change the permissions of that folder so that the user has full control over the subfolders and files - we do not want to just inherit "CREATOR OWNER" permissions. The problem is that the scanner drops files in to that folder and it becomes the owner of the file causing the user to lose access to it.
I'm curious of what ideas are out there on how to do this?
I think I know what options I have, and none of them are optimal. First of all, I am not aware of a group policy preference item for users that can set file/folder permissions - they are all computer scoped, which does not work in this case. In addition, login script execution order comes before group policy preference folder items which would require at least 2 GPOs to work around and I hate login scripts in this day and age.
So, the goal would be to NOT use login scripts, to use a single GPO item, and to have it fully configured during the first logon (without having to logon twice, or wait for gp refresh, etc.)
For the time being the only solution I can come up with would use a single GPO with a login script to set permissions at the user level. So, ultimately, it's looking like the best way is to just create a login script that creates the home folder, creates the scans folder, then sets the permissions. But, that is SO ugly and it is also a pain because our GPOs are using item level targeting for several different reasons and login scripts don't support item-level targeting.