Why doesn't xcacls see Active Directory users?

Question

Active Directory

Actually the essence of the question is this. Users use the server as a workstation (i.e. access via remote desktop), each user has his own folder in which he is allowed to enter. Given the large number of future users, I want to automate the process of granting access rights to user folders.
We have:
Users who will connect to the server via remote desktop.
A separate group for these users.
Folder separately for each user.
So far, the problem is solved as follows. In the properties of the folder - the "Security" tab, all privileges are removed from everyone, except for the user with AD. (Ie for user #1 - folder1, #2 - folder2, etc. and for each folder - privileges).
There was an idea to distribute rights automatically through xcacls with an example
-> xcacls d: / user1 / s / g user1: O
But the problem here is that, as I understand it, the system only looks at local users. How can I force or tell xcacls to work with users from Active Directory ? (That is, in order to add it to the Security rights through the console, because you can easily remove the rights from everyone with another command.)
- how to add a user with AD through the console here?

Answer 1

Use SUBINACL.EXE