RE: [ActiveDir] Roaming Profile Permissions

[Darren Mar-Elia]

You can take ownership of those files and change the permissions to include your account, as long as you don't remove the user's ACE or the localSystem ACE, without affecting their behavior. The only caveat here is described in http://support.microsoft.com/default.aspx?scid=kb;en-us;327462 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Edwin Sent: Friday, June 11, 2004 7:46 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] Roaming Profile Permissions I would like to be able to view the files contained within a users roaming profile but keep getting a “permission denied” error.  I have a Windows 2003 DC and testing on a Windows XP machine.   I have enabled Computer Configuration\Administrative Templates\System\User Profiles\Add the Administrators Security Group to the roaming user profiles but that only allows be to go into the root directory of the user profile but not into other directories such as the Desktop or My Documents.   I know that I can update the NTFS permissions to the sub directories but I am not sure if this is wise to where it may affect the user.  I am sure that there have been required investigations in the past by an Administrator.  What is the recommended solution for this without affecting the user?   Thank you all for your responses in advance.   Edwin