Administrator account cannot access user documents folder

We have a folder that is used for users files for group policy.  The administrator has full permissions for each level of the directory (ie. D:/ full control, User_Docs full control, <username> full control.  However, when attempting to access the My Documents folder in the <username> folder, access denied.  This is an issue because the items are not getting backed up.  The system account also has the same permissions.
ITINITIATIVESAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

tuttlepcCommented:
Sounds like a GUID related issue...

i would rename the problematic initial folder (making sure no files are in use)
recreate folder structure... verify and set perms again on the new folder>>
get the user data copied back into the newly created folder
verify permissions are being inherited properly

and then test
0
tuttlepcCommented:
and if that doesn't work, start with a different name for the initial folder and change your group policy to point to the proper location
0
ITINITIATIVESAuthor Commented:
Hmm...

Do you think if we select the "replace permission entries to this object and all child objects - include these with entries explicity defined here" option, this would resolve the issue?  We don't want to screw up the permissions where the users aren't able to access their files...

Thanks.
0
Determine the Perfect Price for Your IT Services

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden with our free interactive tool and use it to determine the right price for your IT services. Download your free eBook now!

tuttlepcCommented:
yeah, just make sure you don't open up any security holes...  
0
DarylxCommented:
That's by design.  The user folders are user folders and even the administrator can't access them (without taking ownership of the folders and changing the permissions).

An account in the Backup Operators group should be able to back them up.
0
ITINITIATIVESAuthor Commented:
That won't delect the existing permissions entries for that folder, right?
0
DarylxCommented:
I wouldn't change the permissions on the folders.  This could cause access problems even if the users still have the necessary rights.
0
ITINITIATIVESAuthor Commented:
Hmm... The administrator account is also associated with the backup operators group.  However, it still can't backup and lists access denied when attempting to access the file.
0
tuttlepcCommented:
yes, that's what i was gathering from your initial statement(that obviously the backup operators group did not have access)....  there's a tool in the windows resource kit to help you verify the integrity of your perms  and full report on group policy etc.... seems like i ran into this b4 when migrating from NT4 to a Win2K domain...  and it ended up being a reghive perm setting not a file level one that was causing issues... hope that helps....
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
serialbandCommented:
The user permissions are designed to be initially inaccessible to the adminstrator.  Install the Windows Resource kit. (There is a version for NT4, 200 and 2003)  Run admalow.exe from the Resource Kit.  This will give Admistrators permissions to the user folder for archiving purposes.
0
ITINITIATIVESAuthor Commented:
admalow.exe doesn't exist in the Windows 2003 resource kit.  Is it possible a different command?
0
serialbandCommented:
Hmm, for some reason, I thought it was in the resource kit.  I guess I must have downloaded it long ago and it's always been in my path.  http://www.google.com/search?hl=en&q=admnalow&btnG=Search
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2003

From novice to tech pro — start learning today.