ADManager Plus's user creation templates make it possible to set permissions for users' profile path and home folders and even allow you to customize the basic UAC options. You can configure all these settings in the Account tab of the user creation templates as mentioned below.
Set Profile Path Permissions
Profile path specifies a Uniform Naming Convention (UNC) name, such as \\Server\Prof$\%username%, to be the network folder where the user's roaming profile is stored. This way, user's roaming profile is downloaded to whichever workstation he logs onto and it is uploaded back to the server when he logs off. Use dollar sign ($) only if the folder in which the user profiles will be created is an invisible one.
Steps to configure Profile Path:
'Profile path' attribute can be found in the 'Account' tab of user creation templates.
While specifying profile path click on 'Permissions' adjacent to it, this will open a window for profile path settings.
Select the 'Create Profile Path Directory before user's first login' option.
You can add the required permissions using 'Add More Permissions' link.
This leads you to set of options where in you can allow a selected user or group or computer, to have permissions like full control, read attributes, delete etc, over folder and its descendants.
Click on Add.
If needed, select the 'Inherit from parent the permission entries that apply to child objects' option.
Note: You can also create a Windows Vista profile for your users by either:
Set Permissions For Home Folders
Home folders and My Documents make it easier for an administrator to back up user files and manage user accounts by collecting the user's files in one location. If you assign a home folder to a user, you can store the user's data in a central location on a server, and make backup and recovery of data easier and more reliable. ADManager Plus has provided some special features that helps in quickly configuring these properties for the user.
Configuring the property "Home Folder":
You can also create a shared folder as users' home directory using ADManager Plus by selecting the "Create a New Share" option located below the "home folder" field. To make this new share as the users' home directory use this format: \\server\%username% in the home directory path. Use the permissions link to set the desired permissions for this folder.
Customize 'Basic UAC Options'
In the Account Properties field group, user must change password at next logon, user cannot change password, password never expires and account is disabled grouped together as Basic UAC Options. You can customize this grouping to display only the required options. Mentioned below are the steps to customize this grouping.
Configuring 'logon hours' for users
You can specify the appropriate hours during which a user must be allowed access or restricted from accessing the domain using the logon hours option.
Note: Alternatively you can also set logon hours by,