azcomputerguru/claudetools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

sync: auto-sync from HOWARD-HOME at 2026-05-22 15:40:30

Browse Source 
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-05-22 15:40:30
This commit is contained in:
Howard Enos
2026-05-22 15:40:32 -07:00
parent 62d8babad1
commit fa4ac2ea37
5 changed files with 270 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

51
clients/cascades-tucson/scripts/new-home-folder.ps1
View File

@@ -1,17 +1,46 @@
function New-HomeFolder {
param([string]$Username)
$path = "D:\Homes\$Username"
if (Test-Path $path) { Write-Host "$path already exists - check ACL manually"; return }
New-Item -ItemType Directory -Path $path -Force | Out-Null
$acl = New-Object System.Security.AccessControl.DirectorySecurity
$acl.SetAccessRuleProtection($true, $false)
$acl.AddAccessRule((New-Object System.Security.AccessControl.FileSystemAccessRule("CASCADES\$Username","FullControl","ContainerInherit,ObjectInherit","None","Allow")))
$acl.AddAccessRule((New-Object System.Security.AccessControl.FileSystemAccessRule("SYSTEM","FullControl","ContainerInherit,ObjectInherit","None","Allow")))
$acl.AddAccessRule((New-Object System.Security.AccessControl.FileSystemAccessRule("BUILTIN\Administrators","FullControl","ContainerInherit,ObjectInherit","None","Allow")))
Set-Acl $path $acl
Write-Host "$path created with clean ACL"
if (Test-Path $path) {
Write-Host "$path already exists - verifying subfolders"
} else {
New-Item -ItemType Directory -Path $path -Force | Out-Null
$acl = New-Object System.Security.AccessControl.DirectorySecurity
$acl.SetAccessRuleProtection($true, $false)
$acl.AddAccessRule((New-Object System.Security.AccessControl.FileSystemAccessRule("CASCADES\$Username","FullControl","ContainerInherit,ObjectInherit","None","Allow")))
$acl.AddAccessRule((New-Object System.Security.AccessControl.FileSystemAccessRule("SYSTEM","FullControl","ContainerInherit,ObjectInherit","None","Allow")))
$acl.AddAccessRule((New-Object System.Security.AccessControl.FileSystemAccessRule("BUILTIN\Administrators","FullControl","ContainerInherit,ObjectInherit","None","Allow")))
Set-Acl $path $acl
Write-Host "$path created with clean ACL"
}
# Usage: dot-source this file, then call:
# Pre-create all redirect subfolders so fdeploy never fails on first logon.
# fdeploy caches failures and won't retry if subfolders don't exist at first logon.
foreach ($folder in @("Desktop","Documents","Downloads","Music","Pictures")) {
$sub = "$path\$folder"
if (Test-Path $sub) {
Write-Host " $sub already exists"
} else {
New-Item -ItemType Directory -Path $sub -Force | Out-Null
$acl = New-Object System.Security.AccessControl.DirectorySecurity
$acl.SetAccessRuleProtection($true, $false)
$acl.AddAccessRule((New-Object System.Security.AccessControl.FileSystemAccessRule("CASCADES\$Username","FullControl","ContainerInherit,ObjectInherit","None","Allow")))
$acl.AddAccessRule((New-Object System.Security.AccessControl.FileSystemAccessRule("SYSTEM","FullControl","ContainerInherit,ObjectInherit","None","Allow")))
$acl.AddAccessRule((New-Object System.Security.AccessControl.FileSystemAccessRule("BUILTIN\Administrators","FullControl","ContainerInherit,ObjectInherit","None","Allow")))
Set-Acl $sub $acl
Write-Host " Created: $sub"
}
}
}
# Usage: dot-source this file on CS-SERVER, then call:
# New-HomeFolder -Username "lauren.hasselman"
# Run on CS-SERVER before adding user to SG-FolderRedirect.
#
# IMPORTANT: Run this BEFORE adding the user to SG-FolderRedirect and BEFORE
# their first domain logon. fdeploy caches failures — if it runs before
# subfolders exist it will say "no changes detected" on all future logons and
# never retry.
#
# If a user already logged in and redirection failed, use
# fix-shell-redirect.ps1 on the client machine instead.