I think the secret lies in the new way permissions are being handled to
"improve" security.

Try accessing the real Users folder from within "Documents and
Settings".  One of my associates found several ways to gain permissions
to the "Users" folder on Google.

 

From: Tom Miller [mailto:[email protected]] 
Sent: Monday, October 04, 2010 2:13 PM
To: NT System Admin Issues
Subject: Re: Question on "Users" folder on Windows 2008 server

 

Correct, I cannot.  This is the "Users" folder on Windows 2008 servers.
However Windows won't let you change perms on the Users folder.  At
least it refuses to do so for me.  Is it me or is it sorta dumb that
administrators can't administer a server's profiles?

 

Tom

>>> William Robbins <[email protected]> 10/4/2010 2:41 PM >>>
Ah, gotcha. In that case you will have to either take ownership or add
DA to the security on the profiles you wish to access. I'm guessing
presently you cannot even view the security tab to verify permissions?

- WJR



On Mon, Oct 4, 2010 at 13:37, Tom Miller <[email protected]> wrote:

Thanks. I can access the remote profile path, it's just the local
profiles that I cannot access. Administrators are already in the GPO to
have perms to the profile path. 

>>> William Robbins <[email protected]> 10/4/2010 2:29 PM >>> 


I've had similar behavior with our profiles. Tell me, when you look at
the folders do you see the lock icon on the folders?

What we did was change the GPO settings to add the Administrators
security group to the roaming user profile share. as mentioned in this
article:
http://technet.microsoft.com/en-us/library/cc781862%28WS.10%29.aspx

I also found this article useful specifically for 2008:
http://social.technet.microsoft.com/forums/en-US/winservergen/thread/2e3
d27cf-38ec-433d-8bee-2a69a73871a5/


- WJR



On Mon, Oct 4, 2010 at 13:23, Tom Miller <[email protected]> wrote:

Folks,

A few of my XenApp users are having profile issues. I use roaming
profiles, and they seem to work, although the local size is always
larger than the network profile size (temp files, etc).

Anyway I need to access a few of the local profilese on these XenApp
(2008 not R2) servers. I get the "access denied" message of course. So I
add my domain admin account to the local adminstrators group on the
server, but I still can't access the profiles. Do I need to take
ownership of the folder? Or am I missing something? 

Tom Miller
Engineer, Information Technology
Hampton-Newport News Community Services Board
757-788-0528

Confidentiality Notice: This e-mail message, including attachments, is
for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure, or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message. 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to [email protected]
with the body: unsubscribe ntsysadmin

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to [email protected]
with the body: unsubscribe ntsysadmin

 

Confidentiality Notice: This e-mail message, including attachments, is
for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure, or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message. 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to [email protected]
with the body: unsubscribe ntsysadmin

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to [email protected]
with the body: unsubscribe ntsysadmin

 

Confidentiality Notice: This e-mail message, including attachments, is
for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure, or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message. 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to [email protected]
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to [email protected]
with the body: unsubscribe ntsysadmin

Reply via email to