This is why it is often considered a 'best' practice to have your home directories on a volume for just home directories. 

But 'Best' isn't always the optimal solution, or that got missed along the way.  

If nobody brings up a solution, then it is clearly time for you to create an Idea in the Ideas Exchange

I'm sure it will get a nice number of votes  

As Andy Konecny noted, best practice is to use a dedicated volume so you can set user or directory quotas.

I personally use directory quotas, then run a script to set them en mass to whatever.

I tried user quotas in past, but found with some users sharing access to certain home folder directories etc there was some obvious issues with user B is assistant and saves file to a shared spot in User A home and that counts against User B quota.

You can also do the 'proper' thing and buy Storage Manager, as it can take care of this all for you as part of user provisioning.

I put a very simple script to set subdir quotas on github. 

github.com/.../NssDirQuota

Thank you both.

Agree on specific volume for home directory, but that's not always the case in reality

/Lennart

Nice script.  Saved, added to one of my bookmark pages, and I see you have a few other scripts to spelunk through. I so have to get my own scripts in that same setup. 

with folder quotas, dedicated isn't really required, but is a good idea.

If you want this hands off and event driven with user onboarding and offboarding, go with Storage Manager.

Thanks, nothing special but seems to work in my limited usage.  I have a bunch of other stuff kicking around I keep meaning to upload as well.

the AzureADconnect stuff I was puttering with is promising as a super lightweight OES<>Entra sync without IDM overhead, I need to get back to playing with that as had some stuff on personal todo to help the primary dev and document for our OES usage.  Brought this up to OES PM, was hoping he'd toss some resources at it but so far nada.

That sounds like some cool work for syncing. And I can see why supporting a competing option to IDM wouldn't be in his best interest to be seen doing.

I have a project in the queue that will have me looking at either option for best fit.