command for logon script

Hi,
U can use net use command with mappping the user own directory than users floder.OR second option is that u can set permission such that he can access his own floder and can only read or accesss denied to other users floder.U can use combination of share level permission and NTFS permission.
In first option u have to use net use command like this
net use h: \\server\users\user own floder.So the drive is mapped to user own directory so he can not access other floder.
In second option u have set share level permission as full access and on indiviuals users floder with right full access to user own directory
and other user either read permission or no access or list right.This task is tedueous if no of users r more.Then u have use groups like domain users group to apply permission.In this case when u applying permission apply full access to user own floder and apply read or list to group.Remember not to apply "no access" to group otherwise users will get no access to there own directories.
Hopfully this slove ur problem.
avi.

I have connected the users to their home folder in User Manager for Domain, User Environment Profile, connect "H:" to \\server\users\%username%
I tried to use the same "%username%" after the net use command :- net use H: /HOME >nul or - net use H: \\server\users\%username%
in the logon script, it'll only map it to the users folder but not to the user's own folder.

It is documented to be impossible for Win9x/NT4 to map to any directory below \\server\share so that is why you can't map to \\server\share\folder.

Now, the solution I use is to share out every user home folder with the $ at the end of the share name to make it a hidden share.
For example, say you have \\SERVER\USERS\JOE as a folder. You have USERS shared out. Ok.
Now, share out the JOE folder, and call the shared folder name JOE$
That makes the JOE share not listed in Network Neighborhood. No one (including Administrator) can see the share.
Then, you would change the login script to map to:
NET USE H: \\SERVER\%USERNAME%$
So, when JOE logs in, the login script looks for a shared folder called JOE$ on server \\SERVER; it will findit (login scripts can find hidden shares) and map drive H: to it.
But, if your users open Network Neighborhood and double-click on \\SERVER, all they will see is the USERS shared folder; they won't see JOE$, BOB$, TOM$, etc.

hope this helps.