A user at the place where I work left the company, we deleted his account out of AD and then he came back...and now his redirected profile exists, but with the wrong permissions on the folder.. I asked a coworker about it and from what I understood I threw together the following procedure (which still doesn't work, the user still gets a 502 error in the logs and no redirected desktop);. this is bad because he needs to access his old files:
Set security permissions on the folder correctly
1. Took ownership of the folder as Administrator
- Right clicked
\\somersrv\x$\Redirected\<username>
and selectedproperties
from the menu. - Clicked the
Security
tab.- Clicked the
Advanced
button- Clicked the
owner
tab - Noticed that the owner was a UUID string...
S-1-5-21-23423431
(which indicates the original owner has been removed) - Clicked the
Edit...
button.- The
Advanced Security Setting for <username>
dialog appears - On the
owner
tab, clickedOther users or groups
button- The
Select User, Computer, Service Account, or Group
dialog appears.- In the
Enter the object name to select
textbox I typedsomedomain\administrator
- Clicked
OK
- In the
- Selected
somedomain\administrator
from theChange Owner to:
list box. - Checked off the
Replace owner on subcontainers and objects
- Clicked
OK
- The
Windows Security
dialog appeared with the following message:- If you have just taken ownership of this object, you will need to close and reopen this object's properties before you can view or change permissions.
- I clicked
OK
on all the remained dialog boxes to close everything out.
- The
- The
- Clicked the
- Clicked the
2. Took ownership of the folder as the user
(same procedure as above, except I selected the <username>
as the owner instead of the administrator)
3. Set Security Permissions correctly for the user
- Right clicked
\\somersrv\x$\Redirected\<username>
and selectedproperties
from the menu. - In the
<username>
Properties Dialog:- Clicked
Edit...
- The
Permissions for <username>
dialog appears- Clicked
Add..
- The
Select Users, Computers, Service Accounts, or Groups
dialog appears- In the
Enter the object names to select
textbox enteredsomedomain\<username>
- Clicked
OK
- In the
- Clicked
- Back in the
Permissions for <username>
dialog box,- Clicked
<user>
from theGroup or user names
list. - In the
Full Control
row, in theAllow
column checked off the checkbox. - In the
Full Control
row, in theAllow
column unchecked the checkbox. - Clicked
OK
- Clicked
- Clicked
OK
on the remaining dialog boxes until they all closed.
- Clicked
The standard set of permissions my coworker specified are already added to the users folder...they were:
SYSTEM
Domain Admins
<username>
My coworker also eluded at the end of his messages to something about making the SYSTEM
the owner, not sure what he meant; he also said to check the other user directories, but the permissions on them don't seem to adhere to much of a standard. Some of them won't even let me look at the permissions or the owner even when I'm logged in as administrator.
But in the end the user's Desktop
, My Documents
, and Favorites
appeared in the folder but now they have the user as the owner and only the somedomain\administrator
listed under the permissions, and they still get the 502 error.
Why does the user still get the 502 error when logging in?
Also, is there another way to do this? Using the command line or powershell or something like that? The Microsoft UI for this is atrocious.