Does administrator account not have FULL rights??

[Phinoy]

Ok...this is really confusing to me. I have have been trying to get a few new user accounts up and running on company's server. In doing so we have come accross different errors that have caused us to want to start over. Our problem is, now that we have created the users profile, for some odd reason we can not delete the profiles. Even when we are logged in as the administrator we can not delete these folders. Also, when we go to properties of the folder, we noticed that administrator DOES have full access to the folder, yet we still cannot delete the folder. I haven't a clue what the problem is. So could someone please enlighten me on my errors? Thank you for your time and help.

Phinoy

 

[DeanT]

You need to go into the System Properties - Profiles tab and select the profile and choose delete there. Let me know if that doesn't do it.

 

[WilWolitski]

Dean is exactly right. Then you'll be able to delete the folder.

If you always do, what you always did
You'll always get, what you always got!!​

​

[tt]Be a lateral thinker! Think outside the box[/tt]

 

[Phinoy]

I went into the system properties, clicked on the Profiles tab and there is no profile listed for that particular profile. Yet I still cannot delete the folder even when logged on as the administrator.

Phinoy

 

[linuxtricks]

I would try 're-creating' the user account first. Secondly, check the permissions on the particular home directory of the user / as the user. Thirdly, log in as admin and delete the user profile as suggested previously through 'system properties'. Then finally, attempt to trash the directory.

Let me know if that works... I HATE BEING A NEWBIE!
-grumpy smurf

 

[stuttle]

Sounds as if you may be part of an AD Domain, in which case, being an administrator of the workstation will not help you manage profiles that are in AD. That is in the realm of the Domain Admins group. Need more info...

Steve ----------------------------
Steven R. Tuttle
CBE, MCSE, BNCS, DCT, A+
Senior Consultant, ePresence
----------------------------

 

[cnorris517]

Phinoy,
I think the problem you have is this.
When a user profile is generated by the system it is automatically assigned the following permissions

SYSTEM Full control
%username% Full control

If folder that contains the new profile does not have permissions set to replicate down ward then the new profile folder will not inherit permissions for the administrator. As you can see the administrator now has no permissions over this folder and so cannot affect it's contents or delete it.

To work around this you need to follow this procedure.

Log on to the server using the local administrator account (or if it's a PDC/BDC use the domain administrator account.)
Navigate to the folder that contains your profiles.
Open it.
Find the profiles you need to remove.
Right click on them one by one and select properties.
Switch to the security tab and use the take ownership option (this varies between 2000 and NT but if you let me know which you are running i'll send you full details of how to do it)
The system will ask you to confirm the action. Do so.
Depending upon folder size this may take a while. Once it is finished administrator will be the only account with permissions over the folder. You can now do what you like with the folder.

If this doesn't work let me know.

Good luck
Chris

 

[mutidjo]

Queston to cnorris517:

I have a similar problem, except that I am trying to access a My Documents folder within the user's profile folder. I am able to access hte user's profile, but I get the message access is denied for the My Documents folder. The My Documents folder was created automatically using the Folder Redirection feature of Group Policy. I had given the user exclusive rights to the My Documents folder, not realizing that the administrator would not have access to it.

Is there a way to access the My Documents folder? I tried using your steps as mentioned, but get the message that I don't have enough permissions.

Thanks inadvance.

 

[tlcscousin]

Edit the group policy and give yourself the rights then do the things needed. You can always take your rights away again after.