Hi Craig.

That is a very good idea but we still want to assign ReadWriteCreateDelete rights (to AD groups) automatically and in a data driven manner.

The reason is that each of our clients has 1-3 users but we have hundreds of clients. (Our product is a payroll program specific to the laws of Panama.) Naturally, each client's data is in a different directory tree.

Alex

>Easiest way is to create an AD group that has the needed rights (you'll need ReadWriteCreateDelete) and put the user in that group when the user is created.
>
>
>>In order to host our VFP application in Azure I need to grant read-write rights to various directories to many Active Directory users. I'd like this process to be automated and data driven. I think a simple way may be to create and invoke Powershell scripts with VFP. Does anyone have experience doing this or something similar?
>>
>>In the Azure site there will be an active directory server and a data server. The program to grant the rights should run in the AD server and the directories where the rights must be granted are in the data server.
>>
>>TIA,
>>
>>Alex