Folder Redirection: Permissions

[dakow]

We use redirected folders via a GPO. Everyone's My Documents and Desktop are redirected to a server. This allows us for backup as well as 'roaming' users.

The issue is, the share was setup with the root, everyone has access (not a security breach, people cna see a users root folder, but not traverse inside) However, the GPO was setup to grant each user 'exclusive rights' to their own folder. This prohibits domain admins from accessing the data.

I've since modified the root share to have full control for Creator/Owner, Domain Admin, and System. However, this permission will not propogate, since the domain admin is not the owner of the user's folder.

I've tried to uncheck 'grant exclusive rights' on the GPO, and that works for new redirected folders, but it does not change the status of existing users (even on log on/log off)

So the question is, as a domain admin, if I have no permissions/am not the owner on a folder, how can I add permissions to it? Or, more precisely, how can I make it so after the fact, a domain admin can access a redirected folder...

Thanks...
Manu

 

[rye8261]

You have to take ownership of the folder in order to be able to grant yourself access to it. Be careful when doing this though because i dont remember right off the top of my head it it clears the permissions for the whole folder or leave them along and just makes you the owner. First, test it on yours to see what happens.

---------------------------------------

http://www.hybridtown.com

http://www.ryesworld.com

 

[dakow]

Yeah, I've done that on a one off situation, but I cannot take ownership over the whole tree, can I?

 

[rye8261]

Yes you can, it will take a while. But you should create a mini test tree with different permissons on each sub folder to see if the permissions stay to make sure you dont hurt anything when taking permissions.

---------------------------------------

http://www.hybridtown.com

http://www.ryesworld.com

 

[Daveyd123]

I have the same EXACT setup as you have and have run into the same problems. Especially if you want to transfer a file to the users desktop or My Documents folder, you all but have to take ownership of their folders on the server.

When you take ownership, it deletes all permissions and only gives you access to the folder so you have to re-add the user permissions

 

[dakow]

Rye-

I will give that a shot and see, thanks much.

Davey-

Yeah, the other, perhaps unknown to you side effect, if a user who you've taken ownership on, and just readded as 'full control' access logs into another machine, he won't have his documents redirected...

 

[Loki1973]

Maybe a more effective solution:

* Go into users and computers
* List all users
* Select them all
* Choose properties
* Set home folder to \\server\share\%USERNAME% or whatever the path is
* Apply.

This will reset all existing folders and adds the user as with Full Control permissions.