- Roaming profiles directory access
- Posted by Westley on January 9th, 2006
I currently have roaming profiles for our users. I would like to access their
folders on the server. However, I get a message stating that I do not have
access. I know I need to take control of the directory to do this. I'm not
quite sure how to give access back to the users while still having access to
their folders. How do I accomplish this?
- Posted by Lanwench [MVP - Exchange] on January 9th, 2006
In news:16BDD777-447A-42BC-9A29-D67CC3C2A11F@microsoft.com,
Westley <Westley@discussions.microsoft.com> typed:
See http://support.microsoft.com/default...EN-US;q268019&
You need to take ownership as the Administrators *group* (not user) and then
reset the NTFS permissions so that Administrators, System, and the user,
have full control. Make sure to push the settings down to the subfolders.
If you're using W2003, you can use group policy settings to ensure that the
Administrators group has permissions on roaming profile folders when you
create new accounts....in W2000/AD I don't think this is possible.
- Posted by Westley on January 9th, 2006
How do I keep ownership and give some ownership back to the user? I want to
be able to access their folders.
"Lanwench [MVP - Exchange]" wrote:
- Posted by Lanwench [MVP - Exchange] on January 10th, 2006
In news:6835FB37-1109-46F9-B18C-2491DF626704@microsoft.com,
Westley <Westley@discussions.microsoft.com> typed:
Did you read the article? The user doesn't have to be the owner to
manage/access their data - they just need NTFS permissions that will allow
them to do so.
- Posted by Westley on January 10th, 2006
I did, but obviously I'm doing something wrong. I thought I changed the right
settings, but now the user can not log into their profiles.
Sorry somewhat of a newbies here.
"Lanwench [MVP - Exchange]" wrote:
- Posted by Lanwench [MVP - Exchange] on January 11th, 2006
In news:7AAF95CD-B5CD-49BC-8741-C4077ED73C7E@microsoft.com,
Westley <Westley@discussions.microsoft.com> typed:
No worries.
In the user's profile folder on the server:
Right-click, properties, security
Click on the Advanced button
In the owners tab, set the owner as the Administrators group (and push this
down to all subfolders by clicking on "replace owner....") and click OK
In the permissions tab, untick "inherit from parent" and select Copy when
prompted, and close out
Then go back in (right-click/properties/security) and make sure it's set for
Administrators, System and the user account = full control
Click advanced, and tick "replace permission entries...." and click OK
I think this should do it.
Click on Advanced
Untick "inherit from parent" and choose Copy when prompted, so you don't
lock your keys in the car
