Solved

Home folder in File server

Posted on 2016-11-16
8
51 Views
Last Modified: 2016-11-21
When I create a user in my AD, it creates a profile in my file server.

Ex.

I created a user named user1

In my file server, there is a shared folder where a profile is created.

\\fileserver\home\user1

under user1 profile it has

Documents
Desktop
Downloads
Pictures

When I am logged in as Administrator in the fileserver itself.  It always gives me an "access denied" error when I try to browse these folders.  Only user1 can access these folders when he is logged in to his profile.

Is there any way where I can access these files/folders when I am logged in to the file server as Administrator?

Hope my question is clear.  Appreciate any help you can extend.

Thank you.
0
Comment
Question by:bongets
  • 4
  • 3
8 Comments
 
LVL 6

Expert Comment

by:Antzs
ID: 41890910
If the Administrator do not have the rights, you wont be able to access the files/folders.  But being the Administrator, you can always take ownership rights and grant yourself access.

Do take note that, by taking ownership you will remove all other rights which is currently assigned to the file/folders.
0
 

Author Comment

by:bongets
ID: 41890917
Thank you for the comment.  This means that taking ownership is not the best solution because i don't want to removed the rights of the owners of these files/folders.

My only reason of wanting to access their folders is i want to create a batch file that will delete all the files older that 1 year.

I believe that when i run this batch file i will only be able to delete all the other folders except for the files/folders under this /home directory.

any idea how will i do that?

Thank you.
0
 
LVL 7

Expert Comment

by:Andy
ID: 41891114
Hi, taking ownership should not destroy the current permissions on the folder. I;ve done this a few times without issues. However, it may depend on the server family.

To be on the safe side, you might prefer to use the command-line tool, takeown, instead of the GUI tools. This tool definitely won't change the permissions.

Try this article for more information regarding command line:
http://superuser.com/questions/356295/how-do-i-give-administrators-access-to-a-folder-without-destroying-current-permi
0
Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

 

Author Comment

by:bongets
ID: 41892422
Hi,

I tried this command TAKEOWN /A /R /F e:\Home\Folder and I was asked with the below question.

Do you want to replace the directory permissions with permissions granting you full control ("Y" for YES, "N" for NO, "C" for CANCEL)?

I selected "N" so that I can take the ownership but not destroy the permissions. Then I went to the security option in GUI to give permission to administrator.  however, it is still giving me the access denied in getting the permission.

did I do it wrong or did i missed something?

Thanks.
0
 
LVL 7

Expert Comment

by:Andy
ID: 41892549
Are you now the owner of the folder?
0
 
LVL 7

Accepted Solution

by:
Andy earned 500 total points
ID: 41892550
If you now have ownership, you can use icacls

icacls c:\folder /grant administrators:f /t

The article below shows the screenshots for this:
https://www.experts-exchange.com/articles/17526/Windows-File-Server-Folder-ownership-problems-and-resolution.html
0
 

Author Comment

by:bongets
ID: 41895372
Thank you.  

I was able to use icacls c:\folder /grant administrators:f /t

but it seems that i have to do it to all of the sub-folders.

from the link you sent i was also trying the subinacl but can't seem to make it work :(
0
 
LVL 7

Expert Comment

by:Andy
ID: 41895491
Hi,

icacls is a great tool  but yeah a pain for subfolders, might be quicker to list all folders and use a batch file.
Good luck!!
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this article, I am going to show you how to simulate a multi-site Lab environment on a single Hyper-V host. I use this method successfully in my own lab to simulate three fully routed global AD Sites on a Windows 10 Hyper-V host.
This article runs through the process of deploying a single EXE application selectively to a group of user.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question