CACLS Roaming Documents / Profiles

[Guest Jake]

Hi all. I;m hoping you can help me.

 

I just configured an entire Active Directory 2k3 environment and

implemented a backup solution using NT backup. Everything is running

great, except for the roaming documents. I followed the Microsoft

Tech Doc about how to set the permissions properly.

 

When i try to open a user's documents folder on the server, as

Administrator, i get an ACCESS DENIED error. This scared me a little,

as I run the backups as "Administrator".

 

Researching further, I did a test restore of a user's documents... Low

and behold, every one i tried was empty, which means that i am NOT

backing them up.

 

I've tried running cacls as follows:

 

cacls * /T /E /G "DOMAIN\Domain Admins":F

 

But all i get is access denied errors.

 

I'm the damn systems admin. How can I get back control of these user

folders without having to MANUALLY recreate all the permissions on

each user folder.

[Guest Pegasus \(MVP\)]

Re: CACLS Roaming Documents / Profiles

 

 

"Jake" <jacob.sylvia@gmail.com> wrote in message

news:65dcf19a-2ebf-41f7-a23f-e712357f0767@t12g2000prg.googlegroups.com...

> Hi all. I;m hoping you can help me.

>

> I just configured an entire Active Directory 2k3 environment and

> implemented a backup solution using NT backup. Everything is running

> great, except for the roaming documents. I followed the Microsoft

> Tech Doc about how to set the permissions properly.

>

> When i try to open a user's documents folder on the server, as

> Administrator, i get an ACCESS DENIED error. This scared me a little,

> as I run the backups as "Administrator".

>

> Researching further, I did a test restore of a user's documents... Low

> and behold, every one i tried was empty, which means that i am NOT

> backing them up.

>

> I've tried running cacls as follows:

>

> cacls * /T /E /G "DOMAIN\Domain Admins":F

>

> But all i get is access denied errors.

>

> I'm the damn systems admin. How can I get back control of these user

> folders without having to MANUALLY recreate all the permissions on

> each user folder.

 

You need to seize ownership of these folders.

[Guest Jake]

Re: CACLS Roaming Documents / Profiles

 

On Apr 22, 2:56 am, "Pegasus \(MVP\)" <I....@fly.com.oz> wrote:

> "Jake" <jacob.syl...@gmail.com> wrote in message

>

> news:65dcf19a-2ebf-41f7-a23f-e712357f0767@t12g2000prg.googlegroups.com...

>

>

>

> > Hi all. I;m hoping you can help me.

>

> > I just configured an entire Active Directory 2k3 environment and

> > implemented a backup solution using NT backup. Everything is running

> > great, except for the roaming documents. I followed the Microsoft

> > Tech Doc about how to set the permissions properly.

>

> > When i try to open a user's documents folder on the server, as

> > Administrator, i get an ACCESS DENIED error. This scared me a little,

> > as I run the backups as "Administrator".

>

> > Researching further, I did a test restore of a user's documents... Low

> > and behold, every one i tried was empty, which means that i am NOT

> > backing them up.

>

> > I've tried running cacls as follows:

>

> > cacls * /T /E /G "DOMAIN\Domain Admins":F

>

> > But all i get is access denied errors.

>

> > I'm the damn systems admin. How can I get back control of these user

> > folders without having to MANUALLY recreate all the permissions on

> > each user folder.

>

> You need to seize ownership of these folders.

 

If I seize ownership, will this cause problems with the users being

able to access their files / creating folders and files / etc.??

 

~Jake

[Guest Pegasus \(MVP\)]

Re: CACLS Roaming Documents / Profiles

 

 

"Jake" <jacob.sylvia@gmail.com> wrote in message

news:45865f29-01a1-49f9-87bf-660642c69f9c@k37g2000hsf.googlegroups.com...

> On Apr 22, 2:56 am, "Pegasus \(MVP\)" <I....@fly.com.oz> wrote:

>> "Jake" <jacob.syl...@gmail.com> wrote in message

>>

>> news:65dcf19a-2ebf-41f7-a23f-e712357f0767@t12g2000prg.googlegroups.com...

>>

>>

>>

>> > Hi all. I;m hoping you can help me.

>>

>> > I just configured an entire Active Directory 2k3 environment and

>> > implemented a backup solution using NT backup. Everything is running

>> > great, except for the roaming documents. I followed the Microsoft

>> > Tech Doc about how to set the permissions properly.

>>

>> > When i try to open a user's documents folder on the server, as

>> > Administrator, i get an ACCESS DENIED error. This scared me a little,

>> > as I run the backups as "Administrator".

>>

>> > Researching further, I did a test restore of a user's documents... Low

>> > and behold, every one i tried was empty, which means that i am NOT

>> > backing them up.

>>

>> > I've tried running cacls as follows:

>>

>> > cacls * /T /E /G "DOMAIN\Domain Admins":F

>>

>> > But all i get is access denied errors.

>>

>> > I'm the damn systems admin. How can I get back control of these user

>> > folders without having to MANUALLY recreate all the permissions on

>> > each user folder.

>>

>> You need to seize ownership of these folders.

>

> If I seize ownership, will this cause problems with the users being

> able to access their files / creating folders and files / etc.??

>

> ~Jake

 

You will have to re-apply the appropriate permissions after

seizing ownership. Why don't you try it on a test folder in

order to build up your level of confidence?

[Guest Jake]

Re: CACLS Roaming Documents / Profiles

 

On Apr 22, 1:48 pm, "Pegasus \(MVP\)" <I....@fly.com.oz> wrote:

> "Jake" <jacob.syl...@gmail.com> wrote in message

>

> news:45865f29-01a1-49f9-87bf-660642c69f9c@k37g2000hsf.googlegroups.com...

>

>

>

> > On Apr 22, 2:56 am, "Pegasus \(MVP\)" <I....@fly.com.oz> wrote:

> >> "Jake" <jacob.syl...@gmail.com> wrote in message

>

> >>news:65dcf19a-2ebf-41f7-a23f-e712357f0767@t12g2000prg.googlegroups.com...

>

> >> > Hi all. I;m hoping you can help me.

>

> >> > I just configured an entire Active Directory 2k3 environment and

> >> > implemented a backup solution using NT backup. Everything is running

> >> > great, except for the roaming documents. I followed the Microsoft

> >> > Tech Doc about how to set the permissions properly.

>

> >> > When i try to open a user's documents folder on the server, as

> >> > Administrator, i get an ACCESS DENIED error. This scared me a little,

> >> > as I run the backups as "Administrator".

>

> >> > Researching further, I did a test restore of a user's documents... Low

> >> > and behold, every one i tried was empty, which means that i am NOT

> >> > backing them up.

>

> >> > I've tried running cacls as follows:

>

> >> > cacls * /T /E /G "DOMAIN\Domain Admins":F

>

> >> > But all i get is access denied errors.

>

> >> > I'm the damn systems admin. How can I get back control of these user

> >> > folders without having to MANUALLY recreate all the permissions on

> >> > each user folder.

>

> >> You need to seize ownership of these folders.

>

> > If I seize ownership, will this cause problems with the users being

> > able to access their files / creating folders and files / etc.??

>

> > ~Jake

>

> You will have to re-apply the appropriate permissions after

> seizing ownership. Why don't you try it on a test folder in

> order to build up your level of confidence?

 

its not a matter of confidence... i just wanted to know how much i

was in for if i decide to undertake this. with over 100 users and

possibly thousands of folders i'm not sure its worth it for admin

access.

[Guest Pegasus \(MVP\)]

Re: CACLS Roaming Documents / Profiles

 

 

"Jake" <jacob.sylvia@gmail.com> wrote in message

news:90731f14-fcd6-4263-af29-47dc713597a2@c65g2000hsa.googlegroups.com...

> On Apr 22, 1:48 pm, "Pegasus \(MVP\)" <I....@fly.com.oz> wrote:

>> "Jake" <jacob.syl...@gmail.com> wrote in message

>>

>> news:45865f29-01a1-49f9-87bf-660642c69f9c@k37g2000hsf.googlegroups.com...

>>

>>

>>

>> > On Apr 22, 2:56 am, "Pegasus \(MVP\)" <I....@fly.com.oz> wrote:

>> >> "Jake" <jacob.syl...@gmail.com> wrote in message

>>

>> >>news:65dcf19a-2ebf-41f7-a23f-e712357f0767@t12g2000prg.googlegroups.com...

>>

>> >> > Hi all. I;m hoping you can help me.

>>

>> >> > I just configured an entire Active Directory 2k3 environment and

>> >> > implemented a backup solution using NT backup. Everything is

>> >> > running

>> >> > great, except for the roaming documents. I followed the Microsoft

>> >> > Tech Doc about how to set the permissions properly.

>>

>> >> > When i try to open a user's documents folder on the server, as

>> >> > Administrator, i get an ACCESS DENIED error. This scared me a

>> >> > little,

>> >> > as I run the backups as "Administrator".

>>

>> >> > Researching further, I did a test restore of a user's documents...

>> >> > Low

>> >> > and behold, every one i tried was empty, which means that i am NOT

>> >> > backing them up.

>>

>> >> > I've tried running cacls as follows:

>>

>> >> > cacls * /T /E /G "DOMAIN\Domain Admins":F

>>

>> >> > But all i get is access denied errors.

>>

>> >> > I'm the damn systems admin. How can I get back control of these

>> >> > user

>> >> > folders without having to MANUALLY recreate all the permissions on

>> >> > each user folder.

>>

>> >> You need to seize ownership of these folders.

>>

>> > If I seize ownership, will this cause problems with the users being

>> > able to access their files / creating folders and files / etc.??

>>

>> > ~Jake

>>

>> You will have to re-apply the appropriate permissions after

>> seizing ownership. Why don't you try it on a test folder in

>> order to build up your level of confidence?

>

> its not a matter of confidence... i just wanted to know how much i

> was in for if i decide to undertake this. with over 100 users and

> possibly thousands of folders i'm not sure its worth it for admin

> access.

 

Once you know your commands, you can automate their

application with batch files. Furthermore, you can make

them effective for whole directory trees.

[Guest tech teacher]

RE: CACLS Roaming Documents / Profiles

 

I have the same issue with server 2003. When I then take ownership...the

user is denied access to their roaming profile. Any thoughts?

 

"Jake" wrote:

> Hi all. I;m hoping you can help me.

>

> I just configured an entire Active Directory 2k3 environment and

> implemented a backup solution using NT backup. Everything is running

> great, except for the roaming documents. I followed the Microsoft

> Tech Doc about how to set the permissions properly.

>

> When i try to open a user's documents folder on the server, as

> Administrator, i get an ACCESS DENIED error. This scared me a little,

> as I run the backups as "Administrator".

>

> Researching further, I did a test restore of a user's documents... Low

> and behold, every one i tried was empty, which means that i am NOT

> backing them up.

>

> I've tried running cacls as follows:

>

> cacls * /T /E /G "DOMAIN\Domain Admins":F

>

> But all i get is access denied errors.

>

> I'm the damn systems admin. How can I get back control of these user

> folders without having to MANUALLY recreate all the permissions on

> each user folder.

>

[Guest Pegasus \(MVP\)]

Re: CACLS Roaming Documents / Profiles

 

 

"tech teacher" <techteacher@discussions.microsoft.com> wrote in message

news:62BBB307-91A2-4860-AA87-AC87097FDE5E@microsoft.com...

>I have the same issue with server 2003. When I then take ownership...the

> user is denied access to their roaming profile. Any thoughts?

>

 

After taking ownership, you need to grant the user appropriate access.