Docs Redirect and Administrator permissions

Hi all,

I want to make sure I've done this right.

I am working on a server in which redirects were applied for My
Documents. The option in Group Policy to make access Exclusive was
checked. I needed to setup a robocopy script to move files nightly to
another folder for backup redundancy. (It's a temporary measure.)

I followed the instructions here:
http://support.microsoft.com/kb/q288991/

I allowed a particular account in and given them full control. (In my
case, the parent folder I applied the permissions to is D:\Redirects)

In order to reapply permissions on all objects, I had to take
ownership of the files and folders. Subfolders (the user folders) are
not inheriting permissions from D:\Redirects)

Here's where I'm confused:

Creator Owner is set to Full Control on D:\Redirects, but even though
I've reapplied ownership for each user on those objects in their
folders, Effective Permissions doesn't show them to have full control
on the objects.

My goal: Allow Administrators FC to ALL user's redirected folders and
their contacts and to allow each uesr FC access to their own folder
and objects.

Cheers,

Mike....

Anthony
Thu Jul 10 08:10:30 PDT 2008

You don't need to do that. The /b switch on robocopy will run it in backup
mode using the rights to backup without having full control or read rights.
You can use it for example to move a Profiles folder.
Anthony,
http://www.airdesk.co.uk


<thecomputervalet@gmail.com> wrote in message
news:844b9b44-548e-498a-b1d7-11a0a4d344de@56g2000hsm.googlegroups.com...
> Hi all,
>
> I want to make sure I've done this right.
>
> I am working on a server in which redirects were applied for My
> Documents. The option in Group Policy to make access Exclusive was
> checked. I needed to setup a robocopy script to move files nightly to
> another folder for backup redundancy. (It's a temporary measure.)
>
> I followed the instructions here:
> http://support.microsoft.com/kb/q288991/
>
> I allowed a particular account in and given them full control. (In my
> case, the parent folder I applied the permissions to is D:\Redirects)
>
> In order to reapply permissions on all objects, I had to take
> ownership of the files and folders. Subfolders (the user folders) are
> not inheriting permissions from D:\Redirects)
>
> Here's where I'm confused:
>
> Creator Owner is set to Full Control on D:\Redirects, but even though
> I've reapplied ownership for each user on those objects in their
> folders, Effective Permissions doesn't show them to have full control
> on the objects.
>
> My goal: Allow Administrators FC to ALL user's redirected folders and
> their contacts and to allow each uesr FC access to their own folder
> and objects.
>
> Cheers,
>
> Mike....

thecomputervalet
Thu Jul 10 08:20:44 PDT 2008

Ah, nuts. Rookie mistake, I suppose. :-(

Well, I suppose the best thing would be to undo what I've done, but I
am not sure what permissions that redirect folder should have. Hmmm...
they were inheriting permissions. Yes, I can reapply the permissions
that way and reenable exclusivity on user folders. That should undo
what I done did.

On Jul 10, 10:10=A0am, "Anthony [MVP]" <anth...@no-reply.com> wrote:
> You don't need to do that. The /b switch on robocopy will run it in backu=
p
> mode using the rights to backup without having full control or read right=
s.
> You can use it for example to move a Profiles folder.
> Anthony,http://www.airdesk.co.uk
>
> <thecomputerva...@gmail.com> wrote in message
>
> news:844b9b44-548e-498a-b1d7-11a0a4d344de@56g2000hsm.googlegroups.com...
>
> > Hi all,
>
> > I want to make sure I've done this right.
>
> > I am working on a server in which redirects were applied for My
> > Documents. The option in Group Policy to make access Exclusive was
> > checked. I needed to setup a robocopy script to move files nightly to
> > another folder for backup redundancy. (It's a temporary measure.)
>
> > I followed the instructions here:
> >http://support.microsoft.com/kb/q288991/
>
> > I allowed a particular account in and given them full control. (In my
> > case, the parent folder I applied the permissions to is D:\Redirects)
>
> > In order to reapply permissions on all objects, I had to take
> > ownership of the files and folders. Subfolders (the user folders) are
> > not inheriting permissions from D:\Redirects)
>
> > Here's where I'm confused:
>
> > Creator Owner is set to Full Control on D:\Redirects, but even though
> > I've reapplied ownership for each user on those objects in their
> > folders, Effective Permissions doesn't show them to have full control
> > on the objects.
>
> > My goal: Allow Administrators FC to ALL user's redirected folders and
> > their contacts and to allow each uesr FC access to their own folder
> > and objects.
>
> > Cheers,
>
> > Mike....