Robocopy and NTFS permission

W

WS

We're trying to use the latest edition of Robocopy (from the Win 2K3 feature
pack), in order to migrate data from a local disk in one of our servers, to
a partition on our SAN.



While we can successfully migrate the NTFS permissions, Robocopy is denied
access to a number of folders. These folders were created as a result of
redirecting the "My Documents" folder via group policy, and have only the
user whose folder it is, and the SYSTEM group as members.



Under what security context should we try to run Robocopy? I've tried
running it under the domain admin credentials, and I've tried using a
scheduled task to run the app under the Backup Operators security context,
but both are denied access.
 
T

Torgeir Bakken \(MVP\)

WS said:
We're trying to use the latest edition of Robocopy (from the Win 2K3 feature
pack), in order to migrate data from a local disk in one of our servers, to
a partition on our SAN.



While we can successfully migrate the NTFS permissions, Robocopy is denied
access to a number of folders. These folders were created as a result of
redirecting the "My Documents" folder via group policy, and have only the
user whose folder it is, and the SYSTEM group as members.



Under what security context should we try to run Robocopy? I've tried
running it under the domain admin credentials, and I've tried using a
scheduled task to run the app under the Backup Operators security context,
but both are denied access.
Hi

You might need to take ownership of files/folders in that case.

SubInACL looks like is able to do this:

subinacl /noverbose /file \\server\share\dir /setowner=whoever
subinacl /noverbose /subdirectories \\server\share\dir\* /setowner=whoever

New bug fixed version of SubInACL is available for download...
(Windows 2000, Windows Server 2003, Windows XP)

http://www.microsoft.com/downloads/details.aspx?FamilyID=e8ba3e56-d8fe-4a91-93cf-ed6985e3927b
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top