Home folder permissions

In the past I've always created home folders under the profile tab by mass editing the connect to field to \\FileServer\GradYear\%username%

Problem with this method, from what I can see, is that this grants the user Full Control on their home folder. I don't want this behavior. Instead I want the user to have everything but the ability to:

1. Full control
2. Modify permissions
3. Or delete their home folder

What methods have others used to combat this when mass creating accounts?

Ryan