[gptalk] Re: Access Denied on Roaming Profile Folder(s)

  • From: hboogz <hboogz@xxxxxxxxx>
  • To: gptalk@xxxxxxxxxxxxx
  • Date: Tue, 28 Nov 2006 16:57:12 -0500

I hear you.

Th unfortunate problem is i have to change ownership of each folder and
check to propogate this change to all child odjects then add the additional
users/groups manually..



On 11/28/06, Darren Mar-Elia <darren@xxxxxxxxxx> wrote:

 Well, just being the owner is not enough. You also have to have the
actual permissions to view the files.



*From:* gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] *On
Behalf Of *hboogz
*Sent:* Tuesday, November 28, 2006 1:47 PM
*To:* gptalk@xxxxxxxxxxxxx
*Subject:* [gptalk] Re: Access Denied on Roaming Profile Folder(s)



what really bugs me is why do i get an access denied when i'm logged on to
the machine locally as the administrator ; the folder already has the
administrator set as the owner ?


 On 11/28/06, *Darren Mar-Elia* <darren@xxxxxxxxxx> wrote:

If administrator  is already owner and you are logged on as administrator
then all you have to do is change the permissions in the ACL editor.



*From:* gptalk-bounce@xxxxxxxxxxxxx [mailto: gptalk-bounce@xxxxxxxxxxxxx]
*On Behalf Of *hboogz
*Sent:* Tuesday, November 28, 2006 11:26 AM


*To:* gptalk@xxxxxxxxxxxxx
*Subject:* [gptalk] Re: Access Denied on Roaming Profile Folder(s)



how would you do that ?

i've tried to claim ownership of the folder ( Right-Click File ;
Properties ; Ignore Error Message about permissions; go to Security ;
Advanced ; Ownership and change the owner to Administrator ( FYI -
Administrator is already owner of the folder)

??

 On 11/28/06, *Darren Mar-Elia* <darren@xxxxxxxxxx> wrote:

At this point you will probably have to take ownership of the profile
directory and then modify the perms to grant yourself access.



Darren



*From:* gptalk-bounce@xxxxxxxxxxxxx [mailto: gptalk-bounce@xxxxxxxxxxxxx]
*On Behalf Of *hboogz
*Sent:* Tuesday, November 28, 2006 10:58 AM
*To:* gptalk@xxxxxxxxxxxxx


*Subject:* [gptalk] Re: Access Denied on Roaming Profile Folder(s)



I am trying to access the folder and its subfolders directly from the
server. Sometimes i need to copy profiles for backup purposes or throw
application specific .ini files.

In this instance i backedup a .pst file previously and need to place it in
the users my doucments profile folder, but can't.

any ideas ?

On 11/28/06, *hans straat* <hstraat@xxxxxxx> wrote:

The policy "add administrators group to roaming profiles" only applies to
newly created roaming profiles. Otherwords to new users.
If you applied the GPO and profiles were already created you have to use
xcacls or cacls to modify the permissions to the excisting profiles.
But be carefull with the xcacls or cacls command you can also ruin it in a
few commands from the command prompt! TEST before implement it on all
users!!!!

regards,
Hans Straat
www.datacrash.net


 ------------------------------

From: darren@xxxxxxxxxx
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Access Denied on Roaming Profile Folder(s)
Date: Tue, 28 Nov 2006 10:15:56 -0800



How are you trying to access the profile exactly? Is this for a user who
is logged on as themselves and they get access denied on their own folders
or are you trying to access a roaming profile on the server as an
administrator? Because, by default, Administrators are not granted access to
profiles.  And, I'm not sure but I believe that policy you set below only
helps at profile creation time.



*From:* gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] *On
Behalf Of *hboogz
*Sent:* Tuesday, November 28, 2006 10:03 AM
*To:* gptalk@xxxxxxxxxxxxx
*Subject:* [gptalk] Access Denied on Roaming Profile Folder(s)



Hey Everyone,

I have a problem with roaming Profiles/Folders.

Every time i want to access the folders of each respective roaming profile
but i keep getting an access denied.

The share permission is set to full control for everyone

The NTFS permission of the folder is set to Read+Write for ALL users.

The NTFS permissions of the drive has everyone set to Read+Write .

Even when i've changed all permissions set to Full Control for Everyone, i
still get this message.


In the GPO where folder redirection is enabled and Roaming Profiles is
i've enabled "Add Administrators Group to Romain Profiles"

i understand there is the dsacls command, but would know whether it would
be pertinent to this issue and if so, what would the syntax be ?

Thanks,


--
HBooGz:\>




--
HBooGz:\>




--
HBooGz:\>




--
HBooGz:\>




--
HBooGz:\>

Other related posts: