Roaming profiles permissions

Hi again, when i installed a windows 2008 server and configured the roaming folders for domain users, the permissions were wrong and the folders were not created automatically. So here is a basic overview of some working permissions:

NTFS-Level permissions:

Windows User Account Minimum permissions required
Creater/Owner Full Control, Subfolders And Files Only
Administrator None
Security group of users needing to put data on share List Folder/Read Data, Create Folders/Append Data – This Folder Only
Everyone No Permissions
Local System Full Control, This Folder, Subfolders And Files

SMB-Level permissions:

Windows User Account Default Permissions Minimum permissions required
Everyone Full Control No Permissions
Security group of users needing to put data on share N/A Full Control

Following NTFS permissions are set automatically when the folder is created:

Windows User Account Default Permissions Minimum permissions required
%Username% Full Control, Owner Of Folder Full Control, Owner Of Folder
Local System Full Control Full Control
Administrators No Permissions No Permissions
Everyone No Permissions No Permissions

for more information check here.

MCE Remote with XBMC (Windows)

Hello again,

well i'm struggling for several months now with this mce remote and xbmc but today i found a very awesome site taking care of this topic. You can get a predefined keyboard.xml there. The downloaded xml file combined with the xbmc plugin for mceremotes where you can edit this file with a specific editor resolved all my problems with this remote. Finally i can use it like i want.

So here's a summary what you need to customize your keypresses:

  • keyboard.xml (please check the site for more infos)
  • mceremote add-on (install it from the add-on page in xbmc, after installation it can be found under "programs")

I hope this helps someone.

Automatically Map Network Drives on Domain Login

Auto map network drives on login for all users

  1. Save the following batch file to the domain controller's NETLOGON share as logon.bat:
    @echo off
    net use * /delete /yes
    net use x: \\server_name\shared_directory_name
  2. Active Directory Users and Computers
  3. Right click domain name at top left and click Properties > Group Policy > Edit > User Configuration > Windows Settings > Scripts (Logon/Logoff) > Logon > Add…
  4. Enter path to logon.bat (e.g., \\ACME.local\sysvol\ACME.local\scripts\logon.bat) and click OK three times
  5. Login from workstation. Drive x: should appear in My Computer.

Auto map network drives on login for certain users:

  1. Save the following batch file to the domain controller's NETLOGON share as logon.bat:
    @echo off
    net use * /delete /yes
    net use x: \\file_server_name\shared_directory_name
  2. Active Directory Users and Computers > Users > Double click user > Profile
  3. Enter "logon.bat" (no quotes) in the "Logon script" box and click OK
  4. Login from workstation as user modified in step 2. Drive x: should appear in My Computer.

Auto map network drives on login based on Group membership

  1. Get KiXtart
  2. Put WKIX32.EXE in both the domain controller's NETLOGON share and %SystemRoot% (normally C:\WINNT\).
  3. Save the following script as map_drive.kx to the NETLOGON share (be sure to change the group as needed – here we've used Domain Users):
    use "*" /DELETE
    if ingroup("Domain Users")
    use x: "\\server_name\share_name"
    endif
  4. Save the following batch file (which calls your KiXtart script) as login.bat to the domain controller's NETLOGON share:
    @echo off
    \\server_name\NETLOGON\WKIX32.EXE \\server_name\NETLOGON\map_drive.kx
  5. Active Directory Users and Computers
  6. Right click domain name at top left and click Properties > Group Policy > Edit > User Configuration > Windows Settings > Scripts (Logon/Logoff) > Logon > Add…
  7. Enter path to login.bat (e.g., \\ACME.local\sysvol\ACME.local\scripts\login.bat) and click OK three times
  8. Login from workstation as a user belonging to group designated in map_drive.kx. Drive x: should appear in My Computer.
  9. If x: does not appear, check the permissions of NETLOGON, WKIX32.EXE, your script files, etc. Also, make sure that the user or group has the necessary permissions on the shared folder you are mapping.

More KiXtart Examples

  1. Map drive if user is *not* a member of a certain group (in this case, "Students"):
    If InGroup("Students") = 0
       Use R: "\\server\records"
    EndIf
    
  2. Using Boolean operators:
    If InGroup("Teachers") Or InGroup("Office") Or InGroup("PTA")
       Use G: "\\server\Grownup_Files"
    EndIf
    
    If InGroup("2008 Class") And InGroup("Honors")
       Use S: "\\server\smart_kids"
    EndIf
    
  3. Using Select…EndSelect (stops processing on the first true Case)
    Select
       Case InGroup("Students")
          Use S: "\\server\student_storage"
       Case InGroup("Office")
          Use O: "\\server\office_docs"
          Use R: "\\server\records"
       Case InGroup("Teachers")
          Use O: "\\server\office_docs"
          Use S: "\\server\student_storage"
          Use T: "\\server\teaching_materials"
    EndSelect
    

Source: http://tinyapps.org/docs/auto_map_network_drives.html