Hi all, i have a problem with being able to manage NTFS. We have recently took ownership of a domain. (long story) !!!Problem is, i cannot access the users folders "access denied" users can access fine, its just i need access to administer the structures obviously. Is there an easy way of giving Domain Admins Full control without interupting users access ? Please advise, thanks.

Hi ste29. This is normal, and the way it should be working. Ideally, you do not need to admin those folders, as long as the users can access them, it is working correctly. The only way to do what you are looking for that I know of is to make yourself the owner of the folder. This could (most likely) have some adverse affects on the users being able to use the folders. I would leave it as is, and only worry about the specific user folder if there is an issue.Scotty

Hi Scotty1212Thanks for your reply. The reason that i need access withing the folders is to make changes to the NTFS permissions as and when required. As it stands, im unable to get passed the root !

Hello,Go to security, Avanced tab, owner tab and take ownership of the folder and then select the checkbox to allow permissions from parents to propagate.If you are using folder redirection via GPO, then go to the GPO configurations, select the folder properties and uncheck the grant user exclussive rights to folder.Isaac Oben MCITP:EA, MCSE

Hi ste29. This is normal, and the way it should be working. Ideally, you do not need to admin those folders, as long as the users can access them, it is working correctly. The only way to do what you are looking for that I know of is to make yourself the owner of the folder. This could (most likely) have some adverse affects on the users being able to use the folders. I would leave it as is, and only worry about the specific user folder if there is an issue. Scotty This doesn't make any sense to me. A network administrator needs to have Full Control over the users folders. NT's bug of not allowing this drove every tech I know crazy. When Windows 2000 came out Admin had full control again and also with Windows 2003 and better yet the users folder actually Inherited.With Windows 2008 again I have heard that they have deviated backwards to the NT days and it is the MAIN reason I have chose not to deploy on my network in production. I have 2500 users and I regularly resize their picture files (if too large) and delete files they are not allowed to have.Here are a few reasons why a Domain Admin actually NEEDS full control access to files in order to have a functioning network:1> Antivirus. You cannot see, clean or delete a file that cannot be accessed.2> Backup. You cannot backup files that you have no access to.3> Control of illegal files/unallowed files on the network.So far the only way I know how to do this is script it usingxcacls or subinacl to take ownership of the folder/files and then give ownership back to the users if you use Quotas like I do.Windows 2008 is going to be a NIGHTMARE for me because of this and I am definitely not looking forward to the day I am forced to implement it.Cheers,Laralforbes

hi ste29,did you had a chnace to go through lforbes suggestion ?sainath !analyze