Ok have something kind of wierd and I’m not sure why.
Scenario
My account is a member of Domain Admins group as well as Local. I have created a group for the rest of the IT staff called “IT”
I went to all of my servers and added the “IT” group to the root of the users folder where home folders are stored. I gave them full access but only to that \\users folder. No access to subfolders or files.
When the average IT guys goes in to an AD account to change the location or create a home folder for a user, AD creates the folder and assigns the correct security. But it also adds full controll to the folder for the IT anaylst making the change in AD.
Now the wierd part is when I do it, and I’m a memeber of the IT group and the domain/local admins group, it doesn’t add my account to the security permissions.
isn’t it vierd? 😉