Take ownership of user profiles

[mcp]

hi,

i have 2003 domain with user roaming profiles. i have created user
profile folder on the server and shared that with appropriate
permission. the share permission is FULL CONTROL to Everyone group. the
NTFS permission are administrator full control system full control
etc..

my question is i want to see inside user profiles directories on the
server. but i get a message Access denied. the only way i can see
inside their directory is when i take ownership of the user directory
folder.

This then gives an access denied to the respective user when he logon,
it say your roaming profile is not available you will use local profile
Access denied ect..

i have tried evrything but cant seem to sus this problem out.

please can someone tell how to setup user profiles which gives the
respective user and adminstrator the full access to their user profile
directory. i am administartor and i want to see inside their profile
directory..

i have done search on web etc and tried various setting..but to no
avial.

step by step help would be great.

many thanks

 

[Lanwench [MVP - Exchange]]

In

hi,

i have 2003 domain with user roaming profiles. i have created user
profile folder on the server and shared that with appropriate
permission. the share permission is FULL CONTROL to Everyone group.
the NTFS permission are administrator full control system full control
etc..

my question is i want to see inside user profiles directories on the
server. but i get a message Access denied. the only way i can see
inside their directory is when i take ownership of the user directory
folder.

This then gives an access denied to the respective user when he logon,
it say your roaming profile is not available you will use local
profile Access denied ect..

i have tried evrything but cant seem to sus this problem out.

please can someone tell how to setup user profiles which gives the
respective user and adminstrator the full access to their user
profile directory. i am administartor and i want to see inside their
profile directory..

i have done search on web etc and tried various setting..but to no
avial.

step by step help would be great.

many thanks

You will need to take ownership of the existing folders & reset the
permissions appropriately.
But, for new users you create, you can have the Administrators group retain
permissions in the roaming profile folders, via GPO.

It's in Computer config \ Admin templates \ System \ User profiles - you can
enable "Add the Administrators security group to roaming user profiles"

Check out
http://technet2.microsoft.com/Windo...626c-463e-9812-fa46e85c787b1033.mspx?mfr=true
for a lot of good info.

 

[mcp]

In

You will need to take ownership of the existing folders & reset the
permissions appropriately.
But, for new users you create, you can have the Administrators group retain
permissions in the roaming profile folders, via GPO.

It's in Computer config \ Admin templates \ System \ User profiles - you can
enable "Add the Administrators security group to roaming user profiles"

Check out
http://technet2.microsoft.com/Windo...626c-463e-9812-fa46e85c787b1033.mspx?mfr=true
for a lot of good info.

hi,

when you say take ownership of the existing folders and reset the
permission apporiately, do you mean each folder that i want to see
inside, if so please can you give me an example. thanks

 

[Lanwench [MVP - Exchange]]

In mcp <[email protected]> typed:

hi,

when you say take ownership of the existing folders and reset the
permission apporiately, do you mean each folder that i want to see
inside

Yes. Or take ownership of the parent folder as the Administrators group.

Set the NTFS security so that Administrators & System = Full Control. Then,
push those settings down the tree.

And then you can add the specific user with Full Control to his/her folder.
This is not too difficult if you don't have a lot of folders. If you do, you
can use command line utilities like xcacls.

, if so please can you give me an example. thanks

http://technet2.microsoft.com/Windo...d1d9-4d16-93c5-7326aa1f33791033.mspx?mfr=true