Guest Jake Posted April 22, 2008 Posted April 22, 2008 Hi all. I;m hoping you can help me. I just configured an entire Active Directory 2k3 environment and implemented a backup solution using NT backup. Everything is running great, except for the roaming documents. I followed the Microsoft Tech Doc about how to set the permissions properly. When i try to open a user's documents folder on the server, as Administrator, i get an ACCESS DENIED error. This scared me a little, as I run the backups as "Administrator". Researching further, I did a test restore of a user's documents... Low and behold, every one i tried was empty, which means that i am NOT backing them up. I've tried running cacls as follows: cacls * /T /E /G "DOMAIN\Domain Admins":F But all i get is access denied errors. I'm the damn systems admin. How can I get back control of these user folders without having to MANUALLY recreate all the permissions on each user folder.
Guest Pegasus \(MVP\) Posted April 22, 2008 Posted April 22, 2008 Re: CACLS Roaming Documents / Profiles "Jake" <jacob.sylvia@gmail.com> wrote in message news:65dcf19a-2ebf-41f7-a23f-e712357f0767@t12g2000prg.googlegroups.com... > Hi all. I;m hoping you can help me. > > I just configured an entire Active Directory 2k3 environment and > implemented a backup solution using NT backup. Everything is running > great, except for the roaming documents. I followed the Microsoft > Tech Doc about how to set the permissions properly. > > When i try to open a user's documents folder on the server, as > Administrator, i get an ACCESS DENIED error. This scared me a little, > as I run the backups as "Administrator". > > Researching further, I did a test restore of a user's documents... Low > and behold, every one i tried was empty, which means that i am NOT > backing them up. > > I've tried running cacls as follows: > > cacls * /T /E /G "DOMAIN\Domain Admins":F > > But all i get is access denied errors. > > I'm the damn systems admin. How can I get back control of these user > folders without having to MANUALLY recreate all the permissions on > each user folder. You need to seize ownership of these folders.
Guest Jake Posted April 22, 2008 Posted April 22, 2008 Re: CACLS Roaming Documents / Profiles On Apr 22, 2:56 am, "Pegasus \(MVP\)" <I....@fly.com.oz> wrote: > "Jake" <jacob.syl...@gmail.com> wrote in message > > news:65dcf19a-2ebf-41f7-a23f-e712357f0767@t12g2000prg.googlegroups.com... > > > > > Hi all. I;m hoping you can help me. > > > I just configured an entire Active Directory 2k3 environment and > > implemented a backup solution using NT backup. Everything is running > > great, except for the roaming documents. I followed the Microsoft > > Tech Doc about how to set the permissions properly. > > > When i try to open a user's documents folder on the server, as > > Administrator, i get an ACCESS DENIED error. This scared me a little, > > as I run the backups as "Administrator". > > > Researching further, I did a test restore of a user's documents... Low > > and behold, every one i tried was empty, which means that i am NOT > > backing them up. > > > I've tried running cacls as follows: > > > cacls * /T /E /G "DOMAIN\Domain Admins":F > > > But all i get is access denied errors. > > > I'm the damn systems admin. How can I get back control of these user > > folders without having to MANUALLY recreate all the permissions on > > each user folder. > > You need to seize ownership of these folders. If I seize ownership, will this cause problems with the users being able to access their files / creating folders and files / etc.?? ~Jake
Guest Pegasus \(MVP\) Posted April 22, 2008 Posted April 22, 2008 Re: CACLS Roaming Documents / Profiles "Jake" <jacob.sylvia@gmail.com> wrote in message news:45865f29-01a1-49f9-87bf-660642c69f9c@k37g2000hsf.googlegroups.com... > On Apr 22, 2:56 am, "Pegasus \(MVP\)" <I....@fly.com.oz> wrote: >> "Jake" <jacob.syl...@gmail.com> wrote in message >> >> news:65dcf19a-2ebf-41f7-a23f-e712357f0767@t12g2000prg.googlegroups.com... >> >> >> >> > Hi all. I;m hoping you can help me. >> >> > I just configured an entire Active Directory 2k3 environment and >> > implemented a backup solution using NT backup. Everything is running >> > great, except for the roaming documents. I followed the Microsoft >> > Tech Doc about how to set the permissions properly. >> >> > When i try to open a user's documents folder on the server, as >> > Administrator, i get an ACCESS DENIED error. This scared me a little, >> > as I run the backups as "Administrator". >> >> > Researching further, I did a test restore of a user's documents... Low >> > and behold, every one i tried was empty, which means that i am NOT >> > backing them up. >> >> > I've tried running cacls as follows: >> >> > cacls * /T /E /G "DOMAIN\Domain Admins":F >> >> > But all i get is access denied errors. >> >> > I'm the damn systems admin. How can I get back control of these user >> > folders without having to MANUALLY recreate all the permissions on >> > each user folder. >> >> You need to seize ownership of these folders. > > If I seize ownership, will this cause problems with the users being > able to access their files / creating folders and files / etc.?? > > ~Jake You will have to re-apply the appropriate permissions after seizing ownership. Why don't you try it on a test folder in order to build up your level of confidence?
Guest Jake Posted April 23, 2008 Posted April 23, 2008 Re: CACLS Roaming Documents / Profiles On Apr 22, 1:48 pm, "Pegasus \(MVP\)" <I....@fly.com.oz> wrote: > "Jake" <jacob.syl...@gmail.com> wrote in message > > news:45865f29-01a1-49f9-87bf-660642c69f9c@k37g2000hsf.googlegroups.com... > > > > > On Apr 22, 2:56 am, "Pegasus \(MVP\)" <I....@fly.com.oz> wrote: > >> "Jake" <jacob.syl...@gmail.com> wrote in message > > >>news:65dcf19a-2ebf-41f7-a23f-e712357f0767@t12g2000prg.googlegroups.com... > > >> > Hi all. I;m hoping you can help me. > > >> > I just configured an entire Active Directory 2k3 environment and > >> > implemented a backup solution using NT backup. Everything is running > >> > great, except for the roaming documents. I followed the Microsoft > >> > Tech Doc about how to set the permissions properly. > > >> > When i try to open a user's documents folder on the server, as > >> > Administrator, i get an ACCESS DENIED error. This scared me a little, > >> > as I run the backups as "Administrator". > > >> > Researching further, I did a test restore of a user's documents... Low > >> > and behold, every one i tried was empty, which means that i am NOT > >> > backing them up. > > >> > I've tried running cacls as follows: > > >> > cacls * /T /E /G "DOMAIN\Domain Admins":F > > >> > But all i get is access denied errors. > > >> > I'm the damn systems admin. How can I get back control of these user > >> > folders without having to MANUALLY recreate all the permissions on > >> > each user folder. > > >> You need to seize ownership of these folders. > > > If I seize ownership, will this cause problems with the users being > > able to access their files / creating folders and files / etc.?? > > > ~Jake > > You will have to re-apply the appropriate permissions after > seizing ownership. Why don't you try it on a test folder in > order to build up your level of confidence? its not a matter of confidence... i just wanted to know how much i was in for if i decide to undertake this. with over 100 users and possibly thousands of folders i'm not sure its worth it for admin access.
Guest Pegasus \(MVP\) Posted April 23, 2008 Posted April 23, 2008 Re: CACLS Roaming Documents / Profiles "Jake" <jacob.sylvia@gmail.com> wrote in message news:90731f14-fcd6-4263-af29-47dc713597a2@c65g2000hsa.googlegroups.com... > On Apr 22, 1:48 pm, "Pegasus \(MVP\)" <I....@fly.com.oz> wrote: >> "Jake" <jacob.syl...@gmail.com> wrote in message >> >> news:45865f29-01a1-49f9-87bf-660642c69f9c@k37g2000hsf.googlegroups.com... >> >> >> >> > On Apr 22, 2:56 am, "Pegasus \(MVP\)" <I....@fly.com.oz> wrote: >> >> "Jake" <jacob.syl...@gmail.com> wrote in message >> >> >>news:65dcf19a-2ebf-41f7-a23f-e712357f0767@t12g2000prg.googlegroups.com... >> >> >> > Hi all. I;m hoping you can help me. >> >> >> > I just configured an entire Active Directory 2k3 environment and >> >> > implemented a backup solution using NT backup. Everything is >> >> > running >> >> > great, except for the roaming documents. I followed the Microsoft >> >> > Tech Doc about how to set the permissions properly. >> >> >> > When i try to open a user's documents folder on the server, as >> >> > Administrator, i get an ACCESS DENIED error. This scared me a >> >> > little, >> >> > as I run the backups as "Administrator". >> >> >> > Researching further, I did a test restore of a user's documents... >> >> > Low >> >> > and behold, every one i tried was empty, which means that i am NOT >> >> > backing them up. >> >> >> > I've tried running cacls as follows: >> >> >> > cacls * /T /E /G "DOMAIN\Domain Admins":F >> >> >> > But all i get is access denied errors. >> >> >> > I'm the damn systems admin. How can I get back control of these >> >> > user >> >> > folders without having to MANUALLY recreate all the permissions on >> >> > each user folder. >> >> >> You need to seize ownership of these folders. >> >> > If I seize ownership, will this cause problems with the users being >> > able to access their files / creating folders and files / etc.?? >> >> > ~Jake >> >> You will have to re-apply the appropriate permissions after >> seizing ownership. Why don't you try it on a test folder in >> order to build up your level of confidence? > > its not a matter of confidence... i just wanted to know how much i > was in for if i decide to undertake this. with over 100 users and > possibly thousands of folders i'm not sure its worth it for admin > access. Once you know your commands, you can automate their application with batch files. Furthermore, you can make them effective for whole directory trees.
Guest tech teacher Posted July 12, 2008 Posted July 12, 2008 RE: CACLS Roaming Documents / Profiles I have the same issue with server 2003. When I then take ownership...the user is denied access to their roaming profile. Any thoughts? "Jake" wrote: > Hi all. I;m hoping you can help me. > > I just configured an entire Active Directory 2k3 environment and > implemented a backup solution using NT backup. Everything is running > great, except for the roaming documents. I followed the Microsoft > Tech Doc about how to set the permissions properly. > > When i try to open a user's documents folder on the server, as > Administrator, i get an ACCESS DENIED error. This scared me a little, > as I run the backups as "Administrator". > > Researching further, I did a test restore of a user's documents... Low > and behold, every one i tried was empty, which means that i am NOT > backing them up. > > I've tried running cacls as follows: > > cacls * /T /E /G "DOMAIN\Domain Admins":F > > But all i get is access denied errors. > > I'm the damn systems admin. How can I get back control of these user > folders without having to MANUALLY recreate all the permissions on > each user folder. >
Guest Pegasus \(MVP\) Posted July 12, 2008 Posted July 12, 2008 Re: CACLS Roaming Documents / Profiles "tech teacher" <techteacher@discussions.microsoft.com> wrote in message news:62BBB307-91A2-4860-AA87-AC87097FDE5E@microsoft.com... >I have the same issue with server 2003. When I then take ownership...the > user is denied access to their roaming profile. Any thoughts? > After taking ownership, you need to grant the user appropriate access.
Recommended Posts