Profiles and ownership

November 13, 2005 at 10:47:21
Specs: Windows XP Pro, AMD Athlon XP 1900+, 512M

The owner of the agency I work for wants to have access to all files in our employees' roaming profiles. If she were to take ownership of the folder and subfolders that hold the profiles, would that affect our employees' ability to log in or save/delete files in their profiles? If so, are there any another ways to gain access to those profiles without resetting their passwords?


See More: Profiles and ownership

Report •

November 13, 2005 at 11:51:23

You have two reasonable options here.

1) Add the owner's user account to the administrators group (or in the case of a domain, the Domain Admins group). This will give her access to everything including those folders.


2) Just add the owner's user account to the root share (of the roaming profile folders) and give her read/write/list access .... or Full Control depending on what she needs to do.

Having her take ownership of their folders/files makes no sense and could cause problems. Either method I've described will work just fine without causing problems.

Report •

November 14, 2005 at 15:38:17

Thanks for the response!

I tried what you suggested, but she still cannot access profile folders. I even made sure that the only group she was a member of was Domain Admins. On the root share, I gave both the Domain Admins group and my boss's login full control. Share permissions has the Everyone group set to full control. Still no luck. :(

So far the only thing that has worked is to reset an employee's password, then log in and change their profile folder's permissions.

I read somewhere that keeping Domain Admins out of profile folders was a security feature Microsoft programmed in, but I'm not sure how true that is. The last thing I'd want is to screw things up! Do you have any other suggestions? Thanks again for your earlier response!

Report •

November 15, 2005 at 03:20:43

Domain Admins have rights and privileges to do everything. If she's a member of the DA Group, then you shouldn't need to add her Domain Account to the permissions on anything.

And as for the Privacy issue regarding her having access to user's files...Not even gonna go there.

Soylent Green is PEOPLE!!!

Report •

Related Solutions

Ask Question