disable home folder creation on 4.2 (please urgent help ! )

[cemy]

I did community edition v 4.2d installation with ldap integration.. here is the global properties config file in the C:\Alfresco\tomcat\shared\classes..

===========================================================================================

###############################
## Common Alfresco Properties #
###############################

dir.root=C:/Alfresco/alf_data

alfresco.context=alfresco
alfresco.host=127.0.0.1
alfresco.port=80
alfresco.protocol=http

share.context=share
share.host=127.0.0.1
share.port=80
share.protocol=http

### database connection properties ###
db.driver=org.postgresql.Driver
db.username=alfresco
db.password=admin12
db.name=alfresco
db.url=jdbcostgresql://localhost:5432/${db.name}

### FTP Server Configuration ###
ftp.enabled=true
ftp.port=21

### RMI service ports ###
alfresco.rmi.services.port=50500
avm.rmi.service.port=0
avmsync.rmi.service.port=0
attribute.rmi.service.port=0
authentication.rmi.service.port=0
repo.rmi.service.port=0
action.rmi.service.port=0
deployment.rmi.service.port=0

### External executable locations ###
ooo.exe=C:/Alfresco/libreoffice/App/libreoffice/program/soffice.exe
ooo.enabled=true
ooo.port=8100
img.root=C:\\Alfresco\\imagemagick
img.coders=${img.root}\\modules\\coders
img.config=${img.root}\\config
img.gslib=${img.root}\\lib
img.exe=${img.root}\\convert.exe
swf.exe=C:/Alfresco/swftools/pdf2swf.exe
swf.languagedir=C:/Alfresco/swftools/japanese

jodconverter.enabled=false
jodconverter.officeHome=C:/Alfresco/libreoffice/App/libreoffice
jodconverter.portNumbers=8100

### Initial admin password ###
alfresco_user_store.adminpassword=7e29b0a66f71d43c7e14ba436bb6069c

### E-mail site invitation setting ###
notification.email.siteinvite=false

### License location ###
dir.license.external=C:/Alfresco

### Solr indexing ###
index.subsystem.name=solr
dir.keystore=${dir.root}/keystore
solr.port.ssl=443

### BPM Engine ###
system.workflow.engine.jbpm.enabled=false


### LDAP Authentication with Win2008Domain.com

authentication.chain=alfinst:alfrescoNtlm,ldap1:ldap-ad,passthru1assthru
passthru.authentication.servers=DOMAIN\\dc01.Win2008Domain.com,Win2008Domain.com
passthru.authentication.domain=#leave blank

passthru.authentication.guestAccess=false
passthru.authentication.defaultAdministratorUserNames=adminForDomain,adminForAlf

# This flag enables use of this LDAP subsystem for authentication. It may be
# that this subsytem should only be used for synchronization, in which case
# this flag should be set to false.

ldap.authentication.active=false

#
# This properties file brings together the common options for LDAP authentication rather than editing the bean definitions
#

ldap.authentication.allowGuestLogin=false

# How to map the user id entered by the user to taht passed through to LDAP
# In Active Directory, this can either be the user principal name (UPN) or DN.
# UPNs are in the form <sAMAccountName>@domain and are held in the userPrincipalName attribute of a user

ldap.authentication.userNameFormat=%s@Win2008Domain.com

# The LDAP context factory to use

ldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory

# The URL to connect to the LDAP server

ldap.authentication.java.naming.provider.url=ldap://dc01.Win2008Domain.com:389

# The authentication mechanism to use for password validation

ldap.authentication.java.naming.security.authentication=simple

# Escape commas entered by the user at bind time
# Useful when using simple authentication and the CN is part of the DN and contains commas

ldap.authentication.escapeCommasInBind=false

# Escape commas entered by the user when setting the authenticated user
# Useful when using simple authentication and the CN is part of the DN and contains commas, and the escaped \, is
# pulled in as part of an LDAP sync
# If this option is set to true it will break the default home folder provider as space names can not contain \

ldap.authentication.escapeCommasInUid=false

# Comma separated list of user names who should be considered administrators by default

ldap.authentication.defaultAdministratorUserNames=adminForDomain,adminForAlf

# This flag enables use of this LDAP subsystem for user and group
# synchronization. It may be that this subsytem should only be used for
# authentication, in which case this flag should be set to false.

ldap.synchronization.active=true

# The authentication mechanism to use for synchronization

ldap.synchronization.java.naming.security.authentication=simple

# The default principal to bind with (only used for LDAP sync). This should be a UPN or DN

ldap.synchronization.java.naming.security.principal=adminForAlf@Win2008Domain.com

# The password for the default principal (only used for LDAP sync)

ldap.synchronization.java.naming.security.credentials=s3cr3tW0rd!

# If positive, this property indicates that RFC 2696 paged results should be
# used to split query results into batches of the specified size. This
# overcomes any size limits imposed by the LDAP server.

ldap.synchronization.queryBatchSize=1000

# If positive, this property indicates that range retrieval should be used to fetch
# multi-valued attributes (such as member) in batches of the specified size.
# Overcomes any size limits imposed by Active Directory.       

ldap.synchronization.attributeBatchSize=1000



# The query to select all objects that represent the groups to import.

ldap.synchronization.groupQuery=(&(objectclass\=group)(memberOf\=CN\=sysAdmins,OU\=Groups,OU\=1,OU\=City,OU\=US,DC\=Win2008Domain,DC\=com))



# The query to select objects that represent the groups to import that have changed since a certain time.

ldap.synchronization.groupDifferentialQuery=(&(objectclass\=group)(\(memberOf\=CN=sysAdmins,OU\=Groups,OU\=1,OU\=City,OU\=US,DC\=Win2008Domain,DC\=com)))

# The query to select all objects that represent the users to import.

ldap.synchronization.personQuery=(&(objectclass\=user)(\(memberOf\=CN=sysAdmins,OU\=Groups,OU\=1,OU\=City,OU\=US,DC\=Win2008Domain,DC\=com)))



# The query to select objects that represent the users to import that have changed since a certain time.

ldap.synchronization.personDifferentialQuery=(&(objectclass\=user)(\(memberOf\=CN=sysAdmins,OU\=Groups,OU\=1,OU\=City,OU\=US,DC\=Win2008Domain,DC\=com))


# The group search base restricts the LDAP group query to a sub section of tree on the LDAP server.

ldap.synchronization.groupSearchBase=OU\=Groups,OU\=1,OU\=City,OU\=US,DC\=Win2008Domain,DC\=com



# The user search base restricts the LDAP user query to a sub section of tree on the LDAP server.

ldap.synchronization.userSearchBase=OU\=Users,OU\=1,OU\=City,OU\=US,DC\=Win2008Domain,DC\=com


# The name of the operational attribute recording the last update time for a group or user.

ldap.synchronization.modifyTimestampAttributeName=modifyTimestamp


# The timestamp format. Unfortunately, this varies between directory servers.

ldap.synchronization.timestampFormat=yyyyMMddHHmmss'.0Z'



# The attribute name on people objects found in LDAP to use as the uid in Alfresco

ldap.synchronization.userIdAttributeName=sAMAccountName



# The attribute on person objects in LDAP to map to the first name property in Alfresco

ldap.synchronization.userFirstNameAttributeName=givenName


# The attribute on person objects in LDAP to map to the last name property in Alfresco

ldap.synchronization.userLastNameAttributeName=sn


# The attribute on person objects in LDAP to map to the email property in Alfresco

ldap.synchronization.userEmailAttributeName=mail


# The attribute on person objects in LDAP to map to the organizational id  property in Alfresco

ldap.synchronization.userOrganizationalIdAttributeName=company


# The default home folder provider to use for people created via LDAP import

#### ldap.synchronization.defaultHomeFolderProvider=largeHomeFolderProvider


# The attribute on LDAP group objects to map to the authority name property in Alfresco

ldap.synchronization.groupIdAttributeName=cn


# The attribute on LDAP group objects to map to the authority display name property in Alfresco

ldap.synchronization.groupDisplayNameAttributeName=displayName


# The group type in LDAP

ldap.synchronization.groupType=group


# The person type in LDAP

ldap.synchronization.personType=user


# The attribute in LDAP on group objects that defines the DN for its members

ldap.synchronization.groupMemberAttributeName=member


# If true progress estimation is enabled. When enabled, the user query has to be run twice in order to count entries.

ldap.synchronization.enableProgressEstimation=true


# disable user home folder creation, but it does not work

ldap.synchronization.defaultHomeFolderProvider=companyHomeFolderProvider

===========================================================================================
but instead of adding this line to
ldap.synchronization.defaultHomeFolderProvider=companyHomeFolderProvider

but it still create user home folder automatically when somebody logged in to the alfresco.. how can I disable it using alfresco-global.properties file

how can I prevent to creating thousands user home folder ??

[cemy]

another strange thing, it accept both active directory logins such as
name.lastname
and
name.lastname@win2008domain.com
logins

and it creates 2 different directory just for 1 user..