If you’ve been following along in this post series (see Part 1, Part 2, and Part 3 of this series for reference), where I showed you how to create AD users, create soon-to-be Home Folders, and set permissions; all with PowerShell (and some other tools).
Now, it’s time to stitch it all together by assigning the Home Folder attribute on our user object, and point the attribute to the folder we’ve prepared. Yes, of course you could just set the Home folder “Connect To” options on the Profile tab of a User object in the Active Directory Users and Computers (ADUC) tool, but that’s not the point. We want scripting!
So to pick up where we left off last time, all we really need to do is provide a Home folder attribute update on an existing user object. Of course, we could have done this upon initial creation, but this series of posts is attempting to demonstrate the individual steps that you might encounter in the real world enterprise; either separately or together.
There are various tools and ways to make our changes, including via the old method outlined in Part 1. But I’d be remiss if I didn’t confess that much of the time I use good ol’ DSMod. Here’s what a DSMod line would look like to update our user:
dsmod user "cn=Jeremy Pavlov,ou=Demo,dc=CoretekServices,dc=local" -hmdrv H: -hmdir "\\MyCompany.org\DFSPath\Homes\$username$"
…note that I used “$” (dollar sign), which is a cool way to have the DSMod command utilize the “Windows 2000 User Name”, or the “samAccountName” as the value for this special variable.
*Aside: Why do I keep mentioning the DSMod / DSAdd methods? I’ll tell you. It’s because much of the time, I use scripting to parse certain inputs and then generate other scripts that I can hand out to other administrators (yes, script-generating scripts). And while I can’t be certain that everyone will be familiar with script editing and the PowerShell modules for Active Directory, I can be pretty sure they’ll have a command prompt and DSMod. There are other reasons, but the rest mostly come down to preference and how the result files look, etc. So there you go.
However, the new Powershell method with the ActiveDirectory module is pretty nice and easy for this task, too. Here is the PowerShell equivalent to the DSMod command above:
set-aduser -identity "jpavlov" -homeDrive h: -homeDir "\\MyCompany.org\DFSPath\Homes\jpavlov"
…or at least its close, although this time I used the “ID” instead of the “Name”. I think this deserves some closer examination… So next week, I’ll spend a some time covering alternative inputs/methods to the above, before we move on to troubleshooting and validation, and then sum the whole thing up.
Next time… A couple more ways to to get it done… See you then!
Updated 20120923: command syntax fix