Need to add Domain Admins to home directories

[Guest]

We have big problem. When I added 800 users last year I forgot to add anyone except the user to the template. Now no one, even a domain admin can even get into the user's folder. We want to move the users to a new server but we can't copy, backup, etc. I tried using a new template with domain admins added and also my own account but the folder remains the same. Any help would be appreciated.

[kstanush]

Re: Need to add Domain Admins to home directories

Once you create a directory (home directory), changing the directory template won't affect existing directories. The situation that you have is fairly common, as its the default home directory security model used by Windows.

You should be able to verify that the administrators account is the owner of these directories. You should also be able to right click on one in Hyena or Explorer and add domain admins to the directory. Or, you can use a tool like cacls.exe (part of Windows) to add domains admins to the directory security.

[Guest]

Re: Need to add Domain Admins to home directories

Our problem is that I need to add Domain Admins to about 800 home direcotries and the user is the owner of the directory. Will cacl allow me to globally add to all the directories at the same time?

thanks
Garu

[kstanush]

Re: Need to add Domain Admins to home directories

Try it on one and see...a test one or one whose user is on vacation.

The syntax is fairly simple, but make sure you use the /E switch so that it will retain your existing permissions and not replace them.

To do a bunch of them, you would have to write a batch file, but Hyena can help you write it assuming that all of the directories are off of one drive or directory.

But first see if you can get it to work on one of your directories.

[Guest]

Re: Need to add Domain Admins to home directories

I have downloaded some how to's on cacls.exe and I will be experimenting. All users are on one server. Thanks so much for your help.
Gary

[Guest]

Re: Need to add Domain Admins to home directories

I experimented with cacls using this syntax
cacls e:\Students\2007-joy.wilson\* /E /G nccvt\gary:F and it added me to all her files with giving me full permission. I'm thinking that if I did it to e:\Students\* that it will add me every file and folder in the Students directory which is what I want.
I would like your input before I do it to 1500 home directories. Actually I would probably add Domain Admins instead.

thanks you very much for pointing out this tool.

Gary

[kstanush]

Re: Need to add Domain Admins to home directories

I believe that you have it right. You might want to make sure that you can't use Windows Explorer to do this, as its less error prone, but it might want you to have access to the directory before letting you into the Security dialog. But as long as you use the /E switch on cacls, you are OK.