?
Solved

My backup program cannot gain access to redirected folders and profile subfolders to backup the data during routine.

Posted on 2008-11-05
9
Medium Priority
?
1,284 Views
Last Modified: 2009-10-22
When I run the back up routine using Cobian backup, the User Profile data and Redirected Folders data does not make it to the back up drive.  It seems like my backup program cannot gain access to redirected folders and profile subfolders to backup the data during routine. All I get is the folders get created but they are empty (Specifically the Redirected Folder %username%\My Documents).

When I try to access those folders from the server "Administrator" account, I cannot. When I set up Folder Redirection, I allowed Windows to populate the permissions for the redirection as Microsoft's website said that was best practices.

When the backup program "Cobian" runs I have given it the ability to use the .administrator + password to have unadulterated access.

It seems to me that if the Administrator account can access those Redirected Folders then the backup program will be able to as well.

Any thoughts? Thank you in advance.
0
Comment
Question by:eplanetsystems
  • 4
  • 4
9 Comments
 
LVL 11

Expert Comment

by:willettmeister
ID: 22890212
Make sure the the SYSTEM account or whatever account that you run your backups as has access to the folders in question.  Remember it is possible to strip the rights from the administrator account.  The administrator account has the ability to add the rights back but it will not do this automatically(for security reasons).

0
 

Author Comment

by:eplanetsystems
ID: 22890383
For the folders C:\Users\roda\(MyDocuments\Desktop\Application Data) SYSTEM is added under the Security Tab with Full Control or All Checkboxes checked.

Under the Security Tab is "Administrators/Full", "Administrator/Full", "Creator Owner/Special", "%username%/Full+Owner", "SYSTEM/Full"

I added "Administrator" to attempt to give access to the Administrator account and hopefully the backup program as well.
0
 
LVL 11

Expert Comment

by:willettmeister
ID: 22891038
Let me know if that works for you.  If not then I would suggest running filemon http://technet.microsoft.com/en-us/sysinternals/bb896642.aspx to see what user is trying to access the folders and failing and give that user access.  
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 

Author Comment

by:eplanetsystems
ID: 22891350
I ran FileMon. When I try to access the User Profile redirected \My Documents or \Application Data or \Desktop I get "Access Denied" listed in the "Result" column and under the "Other" column I get "%Domainname%\administrator."

I tried to "Replace inheritable permissions to all child objects...." check box under the Security Tab > Advanced Settings. This still gave me an "access denied" message when trying to access those folders under the Administrator account.

Note**
There are a couple of Redirected Folders that do allow me to see them. Initially when I set up Folder Redirection I had some incorrect redirect settings. Once I got it done proper and allowed Windows to create and set permissions to the redirected folders things worked well finally. Of course, that was initially and my "Access Denied" issue still persists for all the other profiles.
0
 
LVL 11

Expert Comment

by:willettmeister
ID: 22893967
You need to go to advanced under security and then choose the owner tab and take owner ship of those folders as the administrator then you will be able to set the permissions.  
0
 

Author Comment

by:eplanetsystems
ID: 22901313
Ok. In doing that, which had crossed my mind, I am afraid that I would alter the permissions that Windows had set when I set up the Folder Redirection. In taking ownership, will the users and Windows still have all the same functionality and read/write access to those folders?

Thanks man
0
 
LVL 11

Expert Comment

by:willettmeister
ID: 22901385
It will depend.  There is a chance that in order for you take permissions it will erase all of the current permissions.  Unfortunately the only way to fix this is to write down all the current permissions and reapply them manually after you take ownership.  

0
 

Expert Comment

by:newgentechnologies
ID: 23121814
Does anyone have a real solution for this prolem??
0
 

Accepted Solution

by:
eplanetsystems earned 0 total points
ID: 23123375
I was able to circumvent the issue by using the local workstation back up program that was initially used just for Outlook.pst and adding the users redirected folders "My documents\Desktop\Application Data" to the backup routine. Which then gets backed up to the server over the network to a shared directory with "Everyone" permissions. Then the backup program on the server was able to backup those files in the full backup routine.

In this situation it will work ok because they don't have a ton of data however if they had too much I think this would not be viable solution because it would clog up the network. Furthermore, if they had sensitive data then this would most definitely not be a solution.
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

How to deal with a specific error when using the Enable-RemoteMailbox cmdlet to create a mailbox in the cloud-based service, for an existing user in an on-premises Active Directory.
Article by: evilrix
Looking for a way to avoid searching through large data sets for data that doesn't exist? A Bloom Filter might be what you need. This data structure is a probabilistic filter that allows you to avoid unnecessary searches when you know the data defin…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Suggested Courses

862 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question