Permissions Script

Question

Hi, apologies if the answer to this is already out in the wild, but my Googling has drawn a blank.
We have single sign on with Active Directory holding all the user accounts. We have the network home folders stored on a Raid attached to one of our 10.8 servers.
Now the problem we have is, when we add a new user and fill in the path to the home folder Active Directory will create the folder, set the POSIX permissions so that the user that created the account has ownership and domain users & others have no access. The ACL is then inherited from the parent folder. I'm pretty sure this is a problem with SMBX as we didn't have this issue when the Servers where running 10.6. This hasn't been much of an issue as we've not had many users to create and then ones we have, I've just set the permission in the server app manually. In the next few weeks though we'll be creating the accounts for our new students, has anyone else seen this issue? I've logged it as a bug with Apple but I don't think it'll be fixed in time, so...
Does anyone have a script kicking around that will:
Remove the inherited permissons
Check AD for a username against a folder of the same name
Set the permissions of that username to Read and Write
Add in Domain Admin's with full control
My bash scripting isn't great, but I'll poke around Google some more until some kind soul takes pity on me
Thanks!

Answer 1

Hello Alexis,
Make modifications to your scripts like this....
[void][System.Reflection.Assembly]::LoadWithPartialName('Microsoft.VisualBasic')
$User = [Microsoft.VisualBasic.Interaction]::InputBox("Username,Name,GUID,Alias etc","Enter the name of
the Mailbox you want to Search permissions for")
        [system.Windows.Forms.MessageBox]::show("$user","Completed!")
$ConvertedUser = (get-mailbox $user).userprincipalname.split("@")[1].split(".")[0] + "\" + (get-mailbox
$user).userprincipalname.split("@")[0]
$output = Get-Mailbox -resultsize Unlimited -RecipientTypeDetails sharedmailbox  |Get-MailboxPermission
| 
Where-Object {($_.AccessRights -eq "FullAccess") -and ($_.User -like $ConvertedUser) -and ($_.IsInherited
-eq $false) -and ($_.User -notlike 'NT Authority\Self')} 
$Output | FT Identity
$Output | Export-CSV c:\user.csv -notypeinformation
Write-Host "Press any Key To continue..."
$Temp = $host.UI.RawUI.ReadKey("NoEcho,IncludeKeyDown")
This will ask user to press any key before it disappears and saves result to c:\user.csv file....