World of EUC

I would set them like this. I mostly creating my shares via servermanager and adjust the permissions accordingly 

These are the permissions I set them as also.

I start out with that. Depending on the security, I create a share group then shared it. Then lock it down similar to the article. Each client has different requirements but that’s the base, yea

Then if you want to take it one step further for security, use the built in groups and remove everyone. By default when Fslogix is installed it creates groups in the local groups in compmgt. You can use GPO to add or update this. Default is everyone. PCI/CIS/SOX defines stricter requirements 

You can use my  script :slightly_smiling_face:

<https://github.com/kaspersmjohansen/Create-ProfileShare>

The repo was marked as private, it should now be public :slightly_smiling_face: