Re: Take ownership of user profiles

In news:1161531631.258491.300180@xxxxxxxxxxxxxxxxxxxxxxxxxxx,
mcp <xzafar@xxxxxxxxxxx> typed:

<snip>


You will need to take ownership of the existing folders & reset the
permissions appropriately.
But, for new users you create, you can have the Administrators group
retain permissions in the roaming profile folders, via GPO.

It's in Computer config \ Admin templates \ System \ User profiles -
you can enable "Add the Administrators security group to roaming
user profiles"

Check out
http://technet2.microsoft.com/WindowsServer/en/library/9fa19668-626c-463e-9812-fa46e85c787b1033.mspx?mfr=true
for a lot of good info.

hi,

when you say take ownership of the existing folders and reset the
permission apporiately, do you mean each folder that i want to see
inside

Yes. Or take ownership of the parent folder as the Administrators group.

Set the NTFS security so that Administrators & System = Full Control. Then,
push those settings down the tree.

And then you can add the specific user with Full Control to his/her folder.
This is not too difficult if you don't have a lot of folders. If you do, you
can use command line utilities like xcacls.

, if so please can you give me an example. thanks

http://technet2.microsoft.com/WindowsServer/en/library/6f097abe-d1d9-4d16-93c5-7326aa1f33791033.mspx?mfr=true


.

Relevant Pages

  • RE: Force Permission / Ownership Changes
    ... You tried to take ownership of the folders but the access was ... by anyone with the permission to grant permissions, ... Does the issue happen to all the folders you move from the old SBS? ...
    (microsoft.public.windows.server.sbs)
  • Re: Administrator/Limited User security issues
    ... > folders for testing the security. ... > permissions but the admin. ... > ownership of the folder. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: XP Folder Ownership Problems, Permissions, Inheritances
    ... I can change the ownership of all my root folders to "Administrators". ... " Permissions", "Inheritances", Users can have certain levels of security ...
    (microsoft.public.windowsxp.security_admin)
  • Re: SBS03 Repair redirected My Documents permissions
    ... Your actual access permissions are very likely fine. ... What usually happens to cause this is that sometimes a new SBS admin sets up a box and then later wants to change whether Administrators also get access to files The only way to make that change for *existing* users is to take ownership of the files/folders and then add or remove the appropriate group. ... So what you end up having is some folders owned by administrator when they had to make the change, and then some folders owned by the user because the user was created *after* the admin took ownership and fixed his GPO. ... Administrator as the creator/owner, some have the user as the creator/owner. ...
    (microsoft.public.windows.server.sbs)
  • Re: NTFS Security Question.
    ... A subordinate object DOES not inherit the PARENT perms (in ... will assume "Nebulous" permissions that refer to the LINK ... The trick is to PROPOGATE to all FILES (not Folders and Files - that would ... Since Windows 2000 deny NTFS permission does not work ...
    (microsoft.public.windowsxp.security_admin)