CACLS Roaming Documents / Profiles

  • Thread starter Thread starter Jake
  • Start date Start date
J

Jake

Guest
Hi all. I;m hoping you can help me.

I just configured an entire Active Directory 2k3 environment and
implemented a backup solution using NT backup. Everything is running
great, except for the roaming documents. I followed the Microsoft
Tech Doc about how to set the permissions properly.

When i try to open a user's documents folder on the server, as
Administrator, i get an ACCESS DENIED error. This scared me a little,
as I run the backups as "Administrator".

Researching further, I did a test restore of a user's documents... Low
and behold, every one i tried was empty, which means that i am NOT
backing them up.

I've tried running cacls as follows:

cacls * /T /E /G "DOMAIN\Domain Admins":F

But all i get is access denied errors.

I'm the damn systems admin. How can I get back control of these user
folders without having to MANUALLY recreate all the permissions on
each user folder.
 
Re: CACLS Roaming Documents / Profiles


"Jake" <jacob.sylvia@gmail.com> wrote in message
news:65dcf19a-2ebf-41f7-a23f-e712357f0767@t12g2000prg.googlegroups.com...
> Hi all. I;m hoping you can help me.
>
> I just configured an entire Active Directory 2k3 environment and
> implemented a backup solution using NT backup. Everything is running
> great, except for the roaming documents. I followed the Microsoft
> Tech Doc about how to set the permissions properly.
>
> When i try to open a user's documents folder on the server, as
> Administrator, i get an ACCESS DENIED error. This scared me a little,
> as I run the backups as "Administrator".
>
> Researching further, I did a test restore of a user's documents... Low
> and behold, every one i tried was empty, which means that i am NOT
> backing them up.
>
> I've tried running cacls as follows:
>
> cacls * /T /E /G "DOMAIN\Domain Admins":F
>
> But all i get is access denied errors.
>
> I'm the damn systems admin. How can I get back control of these user
> folders without having to MANUALLY recreate all the permissions on
> each user folder.

You need to seize ownership of these folders.
 
Re: CACLS Roaming Documents / Profiles

On Apr 22, 2:56 am, "Pegasus \(MVP\)" <I....@fly.com.oz> wrote:
> "Jake" <jacob.syl...@gmail.com> wrote in message
>
> news:65dcf19a-2ebf-41f7-a23f-e712357f0767@t12g2000prg.googlegroups.com...
>
>
>
> > Hi all. I;m hoping you can help me.
>
> > I just configured an entire Active Directory 2k3 environment and
> > implemented a backup solution using NT backup. Everything is running
> > great, except for the roaming documents. I followed the Microsoft
> > Tech Doc about how to set the permissions properly.
>
> > When i try to open a user's documents folder on the server, as
> > Administrator, i get an ACCESS DENIED error. This scared me a little,
> > as I run the backups as "Administrator".
>
> > Researching further, I did a test restore of a user's documents... Low
> > and behold, every one i tried was empty, which means that i am NOT
> > backing them up.
>
> > I've tried running cacls as follows:
>
> > cacls * /T /E /G "DOMAIN\Domain Admins":F
>
> > But all i get is access denied errors.
>
> > I'm the damn systems admin. How can I get back control of these user
> > folders without having to MANUALLY recreate all the permissions on
> > each user folder.
>
> You need to seize ownership of these folders.

If I seize ownership, will this cause problems with the users being
able to access their files / creating folders and files / etc.??

~Jake
 
Re: CACLS Roaming Documents / Profiles


"Jake" <jacob.sylvia@gmail.com> wrote in message
news:45865f29-01a1-49f9-87bf-660642c69f9c@k37g2000hsf.googlegroups.com...
> On Apr 22, 2:56 am, "Pegasus \(MVP\)" <I....@fly.com.oz> wrote:
>> "Jake" <jacob.syl...@gmail.com> wrote in message
>>
>> news:65dcf19a-2ebf-41f7-a23f-e712357f0767@t12g2000prg.googlegroups.com...
>>
>>
>>
>> > Hi all. I;m hoping you can help me.
>>
>> > I just configured an entire Active Directory 2k3 environment and
>> > implemented a backup solution using NT backup. Everything is running
>> > great, except for the roaming documents. I followed the Microsoft
>> > Tech Doc about how to set the permissions properly.
>>
>> > When i try to open a user's documents folder on the server, as
>> > Administrator, i get an ACCESS DENIED error. This scared me a little,
>> > as I run the backups as "Administrator".
>>
>> > Researching further, I did a test restore of a user's documents... Low
>> > and behold, every one i tried was empty, which means that i am NOT
>> > backing them up.
>>
>> > I've tried running cacls as follows:
>>
>> > cacls * /T /E /G "DOMAIN\Domain Admins":F
>>
>> > But all i get is access denied errors.
>>
>> > I'm the damn systems admin. How can I get back control of these user
>> > folders without having to MANUALLY recreate all the permissions on
>> > each user folder.
>>
>> You need to seize ownership of these folders.
>
> If I seize ownership, will this cause problems with the users being
> able to access their files / creating folders and files / etc.??
>
> ~Jake

You will have to re-apply the appropriate permissions after
seizing ownership. Why don't you try it on a test folder in
order to build up your level of confidence?
 
Re: CACLS Roaming Documents / Profiles

On Apr 22, 1:48 pm, "Pegasus \(MVP\)" <I....@fly.com.oz> wrote:
> "Jake" <jacob.syl...@gmail.com> wrote in message
>
> news:45865f29-01a1-49f9-87bf-660642c69f9c@k37g2000hsf.googlegroups.com...
>
>
>
> > On Apr 22, 2:56 am, "Pegasus \(MVP\)" <I....@fly.com.oz> wrote:
> >> "Jake" <jacob.syl...@gmail.com> wrote in message
>
> >>news:65dcf19a-2ebf-41f7-a23f-e712357f0767@t12g2000prg.googlegroups.com...
>
> >> > Hi all. I;m hoping you can help me.
>
> >> > I just configured an entire Active Directory 2k3 environment and
> >> > implemented a backup solution using NT backup. Everything is running
> >> > great, except for the roaming documents. I followed the Microsoft
> >> > Tech Doc about how to set the permissions properly.
>
> >> > When i try to open a user's documents folder on the server, as
> >> > Administrator, i get an ACCESS DENIED error. This scared me a little,
> >> > as I run the backups as "Administrator".
>
> >> > Researching further, I did a test restore of a user's documents... Low
> >> > and behold, every one i tried was empty, which means that i am NOT
> >> > backing them up.
>
> >> > I've tried running cacls as follows:
>
> >> > cacls * /T /E /G "DOMAIN\Domain Admins":F
>
> >> > But all i get is access denied errors.
>
> >> > I'm the damn systems admin. How can I get back control of these user
> >> > folders without having to MANUALLY recreate all the permissions on
> >> > each user folder.
>
> >> You need to seize ownership of these folders.
>
> > If I seize ownership, will this cause problems with the users being
> > able to access their files / creating folders and files / etc.??
>
> > ~Jake
>
> You will have to re-apply the appropriate permissions after
> seizing ownership. Why don't you try it on a test folder in
> order to build up your level of confidence?

its not a matter of confidence... i just wanted to know how much i
was in for if i decide to undertake this. with over 100 users and
possibly thousands of folders i'm not sure its worth it for admin
access.
 
Re: CACLS Roaming Documents / Profiles


"Jake" <jacob.sylvia@gmail.com> wrote in message
news:90731f14-fcd6-4263-af29-47dc713597a2@c65g2000hsa.googlegroups.com...
> On Apr 22, 1:48 pm, "Pegasus \(MVP\)" <I....@fly.com.oz> wrote:
>> "Jake" <jacob.syl...@gmail.com> wrote in message
>>
>> news:45865f29-01a1-49f9-87bf-660642c69f9c@k37g2000hsf.googlegroups.com...
>>
>>
>>
>> > On Apr 22, 2:56 am, "Pegasus \(MVP\)" <I....@fly.com.oz> wrote:
>> >> "Jake" <jacob.syl...@gmail.com> wrote in message
>>
>> >>news:65dcf19a-2ebf-41f7-a23f-e712357f0767@t12g2000prg.googlegroups.com...
>>
>> >> > Hi all. I;m hoping you can help me.
>>
>> >> > I just configured an entire Active Directory 2k3 environment and
>> >> > implemented a backup solution using NT backup. Everything is
>> >> > running
>> >> > great, except for the roaming documents. I followed the Microsoft
>> >> > Tech Doc about how to set the permissions properly.
>>
>> >> > When i try to open a user's documents folder on the server, as
>> >> > Administrator, i get an ACCESS DENIED error. This scared me a
>> >> > little,
>> >> > as I run the backups as "Administrator".
>>
>> >> > Researching further, I did a test restore of a user's documents...
>> >> > Low
>> >> > and behold, every one i tried was empty, which means that i am NOT
>> >> > backing them up.
>>
>> >> > I've tried running cacls as follows:
>>
>> >> > cacls * /T /E /G "DOMAIN\Domain Admins":F
>>
>> >> > But all i get is access denied errors.
>>
>> >> > I'm the damn systems admin. How can I get back control of these
>> >> > user
>> >> > folders without having to MANUALLY recreate all the permissions on
>> >> > each user folder.
>>
>> >> You need to seize ownership of these folders.
>>
>> > If I seize ownership, will this cause problems with the users being
>> > able to access their files / creating folders and files / etc.??
>>
>> > ~Jake
>>
>> You will have to re-apply the appropriate permissions after
>> seizing ownership. Why don't you try it on a test folder in
>> order to build up your level of confidence?
>
> its not a matter of confidence... i just wanted to know how much i
> was in for if i decide to undertake this. with over 100 users and
> possibly thousands of folders i'm not sure its worth it for admin
> access.

Once you know your commands, you can automate their
application with batch files. Furthermore, you can make
them effective for whole directory trees.
 
RE: CACLS Roaming Documents / Profiles

I have the same issue with server 2003. When I then take ownership...the
user is denied access to their roaming profile. Any thoughts?

"Jake" wrote:

> Hi all. I;m hoping you can help me.
>
> I just configured an entire Active Directory 2k3 environment and
> implemented a backup solution using NT backup. Everything is running
> great, except for the roaming documents. I followed the Microsoft
> Tech Doc about how to set the permissions properly.
>
> When i try to open a user's documents folder on the server, as
> Administrator, i get an ACCESS DENIED error. This scared me a little,
> as I run the backups as "Administrator".
>
> Researching further, I did a test restore of a user's documents... Low
> and behold, every one i tried was empty, which means that i am NOT
> backing them up.
>
> I've tried running cacls as follows:
>
> cacls * /T /E /G "DOMAIN\Domain Admins":F
>
> But all i get is access denied errors.
>
> I'm the damn systems admin. How can I get back control of these user
> folders without having to MANUALLY recreate all the permissions on
> each user folder.
>
 
Re: CACLS Roaming Documents / Profiles


"tech teacher" <techteacher@discussions.microsoft.com> wrote in message
news:62BBB307-91A2-4860-AA87-AC87097FDE5E@microsoft.com...
>I have the same issue with server 2003. When I then take ownership...the
> user is denied access to their roaming profile. Any thoughts?
>

After taking ownership, you need to grant the user appropriate access.
 
Back
Top