Grant access to user for all user folders and subfolders in c:/usersConfigure IIS FTP with a Virtual Directory to a UNC pathUser in domain admin group cannot access directory the group has permission to accessRestricting access to Share using both an AD user using a specific ComputerWindows Folder Permissions ScriptUnable to create logon script - Access denied?Adding Domain Admins Full access permissions to all files/folders on a driveSamba4 ignoring Windows Group PermissionsHow to grant a read-only access to a directory to a user on the command line?ACL of Folders on Domain-joined Host for Local Account HoldersHow to grant full access to a windows drive for a domain user when it became lost
Endgame puzzle: How to avoid stalemate and win?
Is throwing dice a stochastic or a deterministic process?
Why did the Apollo 13 crew extend the LM landing gear?
Where to draw the line between quantum mechanics theory and its interpretation(s)?
Speed up this NIntegrate
Is any special diet an effective treatment of autism?
Should homeowners insurance cover the cost of the home?
GitLab account hacked and repo wiped
Understanding ties
My large rocket is still flipping over
How can a hefty sand storm happen in a thin atmosphere like Martian?
What do you call a painting on a wall?
What was the first story to feature the plot "the monsters were human all along"?
Does running exec do anything?
Why are oscilloscope input impedances so low?
Looking for sci-fi book based on Hinduism/Buddhism
What is the closest airport to the center of the city it serves?
Clean sphere separation with a sphere created from a cube
Why would a military not separate its forces into different branches?
How to pass hash as password to ssh server
Can full drive backup be used instead of MSSQL database backup?
Is there a word for food that's gone 'bad', but is still edible?
As black, how should one respond to 4. Qe2 by white in the Russian Game, Damiano Variation?
How to pass query parameters in URL in Salesforce Summer 19 Release?
Grant access to user for all user folders and subfolders in c:/users
Configure IIS FTP with a Virtual Directory to a UNC pathUser in domain admin group cannot access directory the group has permission to accessRestricting access to Share using both an AD user using a specific ComputerWindows Folder Permissions ScriptUnable to create logon script - Access denied?Adding Domain Admins Full access permissions to all files/folders on a driveSamba4 ignoring Windows Group PermissionsHow to grant a read-only access to a directory to a user on the command line?ACL of Folders on Domain-joined Host for Local Account HoldersHow to grant full access to a windows drive for a domain user when it became lost
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;
We have an RDS server with dozens of user profiles and I am trying to run cleanup scripts to get rid of some old software folders from the users C:users*usernameappdatalocalsoftwarenamedfolder
However I get access denied errors when trying to run my script
When I try to browse to said folders it gives me a popup saying I have no permissions click continue to get them
I tried running the following in powershell
icacls "C:users" /grant "Domain Admins":F /t
and now it no longer pops up when clicking the username in C:users, however the appdata folders for each user still do not have the permission set
What can I use to iterate through EVERY SINGLE FOLDER in C:users and add the domain admins group will full control?
windows file-permissions
asked Apr 26 at 15:55
Gummby8Gummby8
262
add a comment |
We have an RDS server with dozens of user profiles and I am trying to run cleanup scripts to get rid of some old software folders from the users C:users*usernameappdatalocalsoftwarenamedfolder
However I get access denied errors when trying to run my script
When I try to browse to said folders it gives me a popup saying I have no permissions click continue to get them
I tried running the following in powershell
icacls "C:users" /grant "Domain Admins":F /t
and now it no longer pops up when clicking the username in C:users, however the appdata folders for each user still do not have the permission set
What can I use to iterate through EVERY SINGLE FOLDER in C:users and add the domain admins group will full control?
windows file-permissions
asked Apr 26 at 15:55
Gummby8Gummby8
262
Won't help, because when you're using the GUI or an unelevated command line your membership of the Domain Admins group is disabled by User Account Control (UAC). See, e.g., this article. Your scripts should work as-is, without making any permissions changes, provided you run them from an elevated (run "as administrator") command prompt. (Of course that assumes there is nothing unusual about the permissions on your server.)
– Harry Johnston
Apr 26 at 22:09
add a comment |
We have an RDS server with dozens of user profiles and I am trying to run cleanup scripts to get rid of some old software folders from the users C:users*usernameappdatalocalsoftwarenamedfolder
However I get access denied errors when trying to run my script
When I try to browse to said folders it gives me a popup saying I have no permissions click continue to get them
I tried running the following in powershell
icacls "C:users" /grant "Domain Admins":F /t
and now it no longer pops up when clicking the username in C:users, however the appdata folders for each user still do not have the permission set
What can I use to iterate through EVERY SINGLE FOLDER in C:users and add the domain admins group will full control?
windows file-permissions
asked Apr 26 at 15:55
Gummby8Gummby8
262
We have an RDS server with dozens of user profiles and I am trying to run cleanup scripts to get rid of some old software folders from the users C:users*usernameappdatalocalsoftwarenamedfolder
However I get access denied errors when trying to run my script
When I try to browse to said folders it gives me a popup saying I have no permissions click continue to get them
I tried running the following in powershell
icacls "C:users" /grant "Domain Admins":F /t
and now it no longer pops up when clicking the username in C:users, however the appdata folders for each user still do not have the permission set
What can I use to iterate through EVERY SINGLE FOLDER in C:users and add the domain admins group will full control?
windows file-permissions
windows file-permissions
asked Apr 26 at 15:55
Gummby8Gummby8
262
asked Apr 26 at 15:55
Gummby8Gummby8
262
asked Apr 26 at 15:55
Gummby8Gummby8
262
asked Apr 26 at 15:55
Gummby8Gummby8
262
asked Apr 26 at 15:55
Gummby8Gummby8
262
262
Won't help, because when you're using the GUI or an unelevated command line your membership of the Domain Admins group is disabled by User Account Control (UAC). See, e.g., this article. Your scripts should work as-is, without making any permissions changes, provided you run them from an elevated (run "as administrator") command prompt. (Of course that assumes there is nothing unusual about the permissions on your server.)
– Harry Johnston
Apr 26 at 22:09
add a comment |
Won't help, because when you're using the GUI or an unelevated command line your membership of the Domain Admins group is disabled by User Account Control (UAC). See, e.g., this article. Your scripts should work as-is, without making any permissions changes, provided you run them from an elevated (run "as administrator") command prompt. (Of course that assumes there is nothing unusual about the permissions on your server.)
– Harry Johnston
Apr 26 at 22:09
Won't help, because when you're using the GUI or an unelevated command line your membership of the Domain Admins group is disabled by User Account Control (UAC). See, e.g., this article. Your scripts should work as-is, without making any permissions changes, provided you run them from an elevated (run "as administrator") command prompt. (Of course that assumes there is nothing unusual about the permissions on your server.)
– Harry Johnston
Apr 26 at 22:09
Won't help, because when you're using the GUI or an unelevated command line your membership of the Domain Admins group is disabled by User Account Control (UAC). See, e.g., this article. Your scripts should work as-is, without making any permissions changes, provided you run them from an elevated (run "as administrator") command prompt. (Of course that assumes there is nothing unusual about the permissions on your server.)
– Harry Johnston
Apr 26 at 22:09
add a comment |
1 Answer
1
active
oldest
votes
1) This is bad practice.
2) I do something similar where I give a backup administrator rights to the users folders so that I can do granular restore using Windows Backup. Just do what you're doing (more or less) but put it in a login script and the user themselves will run the script for you on login or as a scheduled task.
Or add a line to give admins rights to each users folder on login, then automate a task that will do your cleanup task.
answered Apr 28 at 19:06
thelanrangerthelanranger
396
add a comment |
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f964766%2fgrant-access-to-user-for-all-user-folders-and-subfolders-in-c-users%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
1) This is bad practice.
2) I do something similar where I give a backup administrator rights to the users folders so that I can do granular restore using Windows Backup. Just do what you're doing (more or less) but put it in a login script and the user themselves will run the script for you on login or as a scheduled task.
Or add a line to give admins rights to each users folder on login, then automate a task that will do your cleanup task.
answered Apr 28 at 19:06
thelanrangerthelanranger
396
add a comment |
1) This is bad practice.
2) I do something similar where I give a backup administrator rights to the users folders so that I can do granular restore using Windows Backup. Just do what you're doing (more or less) but put it in a login script and the user themselves will run the script for you on login or as a scheduled task.
Or add a line to give admins rights to each users folder on login, then automate a task that will do your cleanup task.
answered Apr 28 at 19:06
thelanrangerthelanranger
396
add a comment |
1) This is bad practice.
2) I do something similar where I give a backup administrator rights to the users folders so that I can do granular restore using Windows Backup. Just do what you're doing (more or less) but put it in a login script and the user themselves will run the script for you on login or as a scheduled task.
Or add a line to give admins rights to each users folder on login, then automate a task that will do your cleanup task.
answered Apr 28 at 19:06
thelanrangerthelanranger
396
1) This is bad practice.
2) I do something similar where I give a backup administrator rights to the users folders so that I can do granular restore using Windows Backup. Just do what you're doing (more or less) but put it in a login script and the user themselves will run the script for you on login or as a scheduled task.
Or add a line to give admins rights to each users folder on login, then automate a task that will do your cleanup task.
answered Apr 28 at 19:06
thelanrangerthelanranger
396
answered Apr 28 at 19:06
thelanrangerthelanranger
396
answered Apr 28 at 19:06
thelanrangerthelanranger
396
answered Apr 28 at 19:06
thelanrangerthelanranger
396
396
add a comment |
add a comment |
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f964766%2fgrant-access-to-user-for-all-user-folders-and-subfolders-in-c-users%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Won't help, because when you're using the GUI or an unelevated command line your membership of the Domain Admins group is disabled by User Account Control (UAC). See, e.g., this article. Your scripts should work as-is, without making any permissions changes, provided you run them from an elevated (run "as administrator") command prompt. (Of course that assumes there is nothing unusual about the permissions on your server.)
– Harry Johnston
Apr 26 at 22:09