Re: Side-effects in taking ownership..


"Jake" <jake44@xxxxxxxxx> wrote in message
news:elWG3UEnHHA.4424@xxxxxxxxxxxxxxxxxxxxxxx
Herb Martin skreiv:
"Jake" <jake44@xxxxxxxxx> wrote in message
news:%23iF7GoDnHHA.4120@xxxxxxxxxxxxxxxxxxxxxxx
Hi,

If the admin takes ownership of the domain users' profile folders, will
that have any side-effects at all for the users?

Possibly, probably. Generally the user needs Full Control (or at least
Change) of the files there and if the permissions are set by "Owner"
then they might be lost, and thus the files become unvailable to the
user without the admin then explictly granting permissions (back) to
the user.

The admin really should NOT be doing this. Why would you want to do so?

I need to see what is causing some user profiles to grow very big and I
have been advised to take owership to be able to see the size of each
user's profile. (Btw. I find it weird that windows does not provide an
easy way to list profile folder sizes).

If you can list the directories (and usually admins can) then you can
simple do this:

dir /s PROFILE_PATH

(putting in the actual path).

If you cannot, then have the user grant your read on the files -- you really
are NOT supposed to be taking ownership of others files except in dire
emergencies.

For future created users I have enabled the 'grant admins group security
rights of user profile' GPO.

Comments?



.

Relevant Pages

  • Re: Roaming Profiles (Admins must takeownership to look at)
    ... works on ownership. ... But we still need to hit the already existing folders and correct them. ... and Admins get full control. ... > I'm guessing the official Microsoft version of profile creation is based ...
    (microsoft.public.scripting.wsh)
  • Re: 1 of 4 users has a locked desktop Addl Info
    ... do it while logged in as "Chris" or do I do it from my Admin account/profile? ... Then I logged out of Chris, switched to my profile as Admin, changed his ... account back to Limited, ...
    (microsoft.public.windowsxp.general)
  • Re: Roaming Profile / Outlook Issues
    ... | without local admin privileges. ... On a new account ... I guess this is because of permission on the file system. ... | the profile on a old account and recreate it, ...
    (microsoft.public.windows.server.general)
  • Re: group policies 2003 sbs
    ... > account name w/ privlages to change (Domain admin). ... but this isn't how you ought to do it in SBS. ... profile to their new domain profile - as well as put the workstation in the ... > logged back in as admin, and went to profiles tab. ...
    (microsoft.public.windows.server.sbs)
  • Re: access denied
    ... How to take ownership of a file or folder in Windows XP ... > No matter how much I change the new RAY profile I've ...
    (microsoft.public.security)