I have a shared folder that I am moving to a new server with Robocopy. However, I do not have FULL permissions to all of the source files.

I am planning on taking ownership of all files and folders with takeown, and then adding NTFS permission, then repeating the Robocopy.

takeown /f "D:\Data" /r /a /d y
icacls "D:\Data" /grant "administrator:F" /T

My questions are:

  1. Does taking ownership as shown above affect file permissions at all? I would like to start this ahead of time (during the day) since it will take a while. But if it will cause people to lose access to their files, then it will have to wait until after hours.
  2. Will the icacls command add Full Control for Administrator, without affecting any other permissions? Again, my goal is for this to not affect end users.

Taking ownership does not change permissions. That command looks like it will grant the Administrator account Full control and leave the other ACLs (but you should always test this on a small sample of data).

You should note that a Folder Redirection GPO checks to see if the user account being redirected owns the folders in question. If it doesn't redirection will fail. If you're trying to do this on a share that hosts redirected folders, I wouldn't do it this way.

Also note that by changing the owner, any Creator Owner ACEs will not apply to Administrator instead of the previous owner. The use of Creator Owner in ACLs outside of folder redirection is somewhat rare, so this may not affect you.


Taking ownership actually DOES reset the perm on the target folder. It just replaces with admin group.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.