Re: Redirected Folders
- From: Jerold Schulman <Jerry@xxxxxxxxxx>
- Date: Fri, 01 Jul 2005 10:03:16 -0400
On Thu, 30 Jun 2005 12:45:02 -0700, "Ron Gallimore" <RonGallimore@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
>I just took over a network that uses redirected documents. They were not set
>up originally to allow administrators to access these documents. How can I
>fix this? Will the steps in KB article 288991 mess up the permissions for
>current users?
The steps in that KB will not mess up user permissions.
If will set things up properly for new users.
To fix administrator access for the current users, you need to grant Administrators Full Control on all folders and subfolders,
and force User Ownership and Full Control.
The best way to do that is via a script that runs in the System context:
See tip 3215 » How do I schedule a job to run under the SYSTEM context?
in the 'Tips & Tricks' at http://www.jsifaq.com
NOTE: tip 8530 » Corrected version of SubInAcl.
In the script, enumerate sub-folders from parent folder and use CACLS.
If the parent folder is C:\Users, then:
@echo off
setlocal
pushd c:\users
for /f "Tokens=*" %%a in ('dir /b /a c:\users') do (
echo y| cacls "c:\users\%%a" /T /E /C /g Administrators:F
echo y| cacls "c:\users\%%a" /T /E /C /g "%USERDOMAIN%\%%a":F
subinacl /subdirectories "c:\users\%%a" /setowner="%USERDOMAIN%\%%a"
subinacl /subdirectories "c:\users\%%a\*.*" /setowner="%USERDOMAIN%\%%a"
)
popd
endlocal
.
- Prev by Date: AARGH!! win2003 GPO is driving me NUTS!
- Next by Date: Re: Error 1058 and 1030 on Clients
- Previous by thread: AARGH!! win2003 GPO is driving me NUTS!
- Next by thread: Re: Redirected Folders
- Index(es):
Relevant Pages
|
