Administrator doesn't have permission to view a folder?!

Hi,

I have a windows 2008 server and have set a GPO to redirect users "documents" folder to \\server\users.

Under the security tab, I have the the folder "Users" to give FULL control to Administraotrs and Domain Admins for this folder, subfolders and files. I have given Creator/Owner full control for subfolders and files.

When I log into the server as the only administrator and try to browse users\user1 I get told I don't have permission to access the folder!

how can this be?
MDWinterAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Mike ThomasConsultantCommented:
This is Normal

Redirection gives the users exclusive rights to the folder, to view it you will have to take ownership of the folder and then re-apply permissions back tot he administrator AND the users, you will have to then apply those permissions to sub folders/files.



0
MDWinterAuthor Commented:
Thanks - that makes sense.

I think I'm being stupid though, because when I try to take owenership then give back, I end up locking the user out of his files!

Can you please detail exact steps to 'take ownership' and then restore the user's own access, such that BOTH of us can see/use the folder?

Thanks.
0
Mike ThomasConsultantCommented:
Right click the users folder, select Properties > Security > Advanced > Owner > Select the administrator then apply and ok all boxes.

Right click the users folder, select Properties > Security  > Add

Administrator : Full Control
Domain Admin : Full Control
SYSTEM : Full Control
Backup Account : Full Control (if you have one seperate to domain admin)
The User Who's Folder It Is : Modify

Once they are set click on advanced and put a tick in the box which reads "Replace Permissions on All Child objects with entries shown here that apply to child objects"

The apply

Job Done





0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Mike ThomasConsultantCommented:
The Apply should have been then "click apply", and confirm your action.
0
AwinishCommented:
I think below KB will make you more clear with Folder redirection permission.

http://support.microsoft.com/kb/288991
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.