Change home folder default permission?

i have searched on , can't seem find similar trying do. using windows server 2003 active directory. when create new user account on domain, use profile tab specify home directory user. when user logs in first time, active directory creates folder in specified path. working correctly. problem gives user full control on folder. has caused lot of problems because "clever" users have discovered thay can change permission on folder or subfolders beneath it. because don't want staff looking @ "sensitive" files. of course doesn't work since can take ownership of file , give myself permissions. causes trouble failed backups, inability scan these folders viruses, migration new storage etc. on occasion 1 of these users call me , ask file or folder restored, , @ point discover not have backup of files , cannot restore them. give them lecture, have on 2500 users, , can't talk them all. right have create account , login teh folder created, go take away full control permission , reset password again , set force user change password @ next login. isn't there way change domain controller gives user modify , not full control?

one additional note. people create user accounts not have access directory holds home folders.

the files in fact sensitive. staff end creating accounts , then i have step in permissions right. far easier if a domain admin did not have assist each new user account on domain of on 2500 users. there have been lots of reads on posting, no replies of yet. have idea start searching answer or alternative way of doing this?

Windows Server  >  Windows Server General Forum