[gptalk] Re: Access Denied on Roaming Profile Folder(s)

  • From: "Darren Mar-Elia" <darren@xxxxxxxxxx>
  • To: <gptalk@xxxxxxxxxxxxx>
  • Date: Tue, 28 Nov 2006 13:51:52 -0800

Well, just being the owner is not enough. You also have to have the actual 
permissions to view the files.

 

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On 
Behalf Of hboogz
Sent: Tuesday, November 28, 2006 1:47 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Access Denied on Roaming Profile Folder(s)

 

what really bugs me is why do i get an access denied when i'm logged on to the 
machine locally as the administrator ; the folder already has the administrator 
set as the owner ?




On 11/28/06, Darren Mar-Elia <darren@xxxxxxxxxx> wrote:

If administrator  is already owner and you are logged on as administrator then 
all you have to do is change the permissions in the ACL editor.

 

From: gptalk-bounce@xxxxxxxxxxxxx [mailto: <mailto:gptalk-bounce@xxxxxxxxxxxxx> 
 gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of hboogz
Sent: Tuesday, November 28, 2006 11:26 AM


To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Access Denied on Roaming Profile Folder(s)

 

how would you do that ?

i've tried to claim ownership of the folder ( Right-Click File ; Properties ; 
Ignore Error Message about permissions; go to Security ; Advanced ; Ownership 
and change the owner to Administrator ( FYI - Administrator is already owner of 
the folder) 

??



On 11/28/06, Darren Mar-Elia <darren@xxxxxxxxxx> wrote:

At this point you will probably have to take ownership of the profile directory 
and then modify the perms to grant yourself access.

 

Darren

 

From: gptalk-bounce@xxxxxxxxxxxxx [mailto: <mailto:gptalk-bounce@xxxxxxxxxxxxx> 
 gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of hboogz
Sent: Tuesday, November 28, 2006 10:58 AM
To: gptalk@xxxxxxxxxxxxx


Subject: [gptalk] Re: Access Denied on Roaming Profile Folder(s)

 

I am trying to access the folder and its subfolders directly from the server. 
Sometimes i need to copy profiles for backup purposes or throw application 
specific .ini files.

In this instance i backedup a .pst file previously and need to place it in the 
users my doucments profile folder, but can't. 

any ideas ?

On 11/28/06, hans straat <hstraat@xxxxxxx> wrote:

The policy "add administrators group to roaming profiles" only applies to newly 
created roaming profiles. Otherwords to new users.
If you applied the GPO and profiles were already created you have to use xcacls 
or cacls to modify the permissions to the excisting profiles.
But be carefull with the xcacls or cacls command you can also ruin it in a few 
commands from the command prompt! TEST before implement it on all users!!!!
 
regards,
Hans Straat
www.datacrash.net 




  _____  

From: darren@xxxxxxxxxx
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Access Denied on Roaming Profile Folder(s)
Date: Tue, 28 Nov 2006 10:15:56 -0800

 

How are you trying to access the profile exactly? Is this for a user who is 
logged on as themselves and they get access denied on their own folders or are 
you trying to access a roaming profile on the server as an administrator? 
Because, by default, Administrators are not granted access to profiles.  And, 
I'm not sure but I believe that policy you set below only helps at profile 
creation time. 

 

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On 
Behalf Of hboogz
Sent: Tuesday, November 28, 2006 10:03 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Access Denied on Roaming Profile Folder(s)

 

Hey Everyone,

I have a problem with roaming Profiles/Folders.

Every time i want to access the folders of each respective roaming profile but 
i keep getting an access denied.

The share permission is set to full control for everyone 

The NTFS permission of the folder is set to Read+Write for ALL users.

The NTFS permissions of the drive has everyone set to Read+Write .

Even when i've changed all permissions set to Full Control for Everyone, i 
still get this message. 


In the GPO where folder redirection is enabled and Roaming Profiles is i've 
enabled "Add Administrators Group to Romain Profiles"

i understand there is the dsacls command, but would know whether it would be 
pertinent to this issue and if so, what would the syntax be ? 

Thanks,


-- 
HBooGz:\> 




-- 
HBooGz:\> 




-- 
HBooGz:\> 




-- 
HBooGz:\> 

Other related posts: