If you are having a domain controller, and decided to give a personal drive for all users, then home folder configuration is the best way to do it.
But if you want to make it secure for every users, then you have to configure something extra with ntfs security and share security.
Our current requirement as follows:
- Deploy home folder for 500+ users
- Make it secure, so that one user can not view others home folder from home share. Browse option should be disabled.
First option was easy and simple, but I have to think a lot on second option.
You can get the overview on how ntfs permission works on network share from following:
USERS | NTFS PERMISSION | SHARE PERMISSION | EFFECTIVE PERMISSION |
USER A | R | R | R |
USER B | F | R | R |
USER C | R | F | R |
USER D | F | F | F |
USER E | F | N | N |
USER F | N | F | N |
