Christian Zartl, BSc

Private blog and WWW page

Christian Zartl, BSc

Christian Zartl, BSc - Private blog and WWW page

How to take ownership of user profile folders in Microsoft Windows domains

User profile folders in Microsoft Windows domains are automatically generated by the system itself and grant access for the user only. If you want to have access to this folder as a domain administrator, you have to take ownership of the folder first.

The following how-to is not only for profile folders but works always if you want to change messed up security settings or system-generated folders.

When you do a right click on the user profile folder and choose the "Security" tab, you will see a window similar to this:

Security tab of Properties

Properties of a system-generated User Profile Folder

It says "You do not have permission to view or edit this object's permission settings."

  • Click on "Advanced"
    • Now choose the "Owner" tab
Owner tab

Take ownership of a system-generated folder

  • Click "Edit..."
    • Select your administrator account
    • Tick the checkbox
      • "Replace owner on subcontainers and objects"
Replace owner on subcontainers and objects

Replace owner on subcontainers and objects

      • Click "Apply"
      • You will get a very important warning message
All permissions will be replaced

Windows Security warning message

It says: "All permissions will be replaced if you press Yes." So click "Yes" only if you know how to set the correct permissions lateron.

After pressing "Yes" it shows some progress depending on the amount of files and subfolders inside the folder and finally another Windows security information:

You will need to close and reopen the properties

Windows Security information

So click "OK" four times on open the properties again. Now you are able to edit the security settings, but your user is the only one with granted access. For a user profile folder you will have to at least add the SYSTEM and the user account who belongs to this profile.

Default permissions on user profile folders

Permissions

Grant them all full control.

Kategorie: Howtos

Deine E-Mail-Adresse wird nicht veröffentlicht. Pflichtfelder sind markiert *

*