Home Folder Permissions issue

[fiza]

We have a GPO which is redirecting documents to users home folders. Unfortunately we ticked "Grant User Exclusive Rights" and now we cannot get into users downloads, video or music folders as we don't have the rights. Reading online it appears that the only way to do it would be to take ownership of the folders.

 

Is there any way around this? Is there a Powershell script that we can use to give Admins access again?

[strawberry]

Take ownership then use ntfsfix from wisesoft to sort permissions.

[fiza]

Take ownership then use ntfsfix from wisesoft to sort permissions.

 

Is the only way to take ownership to do it manually? I was hoping to avoid taking ownership.

I tried downloading ntfsfix but it wont install as it says it needs .net 1.1

[Rob_D]

I've used https://helgeklein.com/setacl/ (the free command line version) to take ownership and get permissions on folder structures in the past.

[strawberry]

You'll need to take ownership at a high level then filter it down.

[fiza]

You'll need to take ownership at a high level then filter it down.

 

As it's home folders will that affect user access?

[Katy]

As it's home folders will that affect user access?

In theory, if you have read permissions, taking ownership won't alter the permissions just change the owner. (Edit: Probably adds you in as well but it doesn't delete the existing entries, been a while since I've done this)

If you don't have read access then it will also replace the permissions with new ones (as you don't have permission to see what the existing ones are). This will affect user access.

 

Although I'd leave it until out of hours just incase.

[Rob_D]

As it's home folders will that affect user access?

It shouldn't. But if it does you can get AD to automatically "fix" the permissions/ownership by re-entering the home drive path on the user accounts. As long as you're using something like \\server\share$\%username%, you should be able to do it on bulk. And I'm pretty sure they'll keep any inherited (admin) permissions.

[fiza]

It shouldn't. But if it does you can get AD to automatically "fix" the permissions/ownership by re-entering the home drive path on the user accounts. As long as you're using something like \\server\share$\%username%, you should be able to do it on bulk. And I'm pretty sure they'll keep any inherited (admin) permissions.

 

We have always used \\server\%username%$

[fiza]

After taking ownership and resetting the permissions. Can I leave ownership as that or does it need to be the user as owner?