Why is the ADS_ADSAccount_CreateHome job setting read and write permissions on a shared folder
説明
When creating a Home Directory for an end user, the ADS_ADSAccount_CreateHome job only sets the read and write rights to the shared folder.
原因
By design
対策
Currently the ADS_ADSAccount_CreateHome job uses the rights specified in the following configuration parameter:
QER\Person\User\AccessRights\HomeDir\User
Out of the box this is set to: +r+w-x
This equals an access control list of add read, add write, deny execute. If more permissions are needed the value will need to be updated to match the rights required for the folder in question.