Manu Narayan

Well, that I know and agree with, as that is why we currently have redirected folders, but, just to give Domain Admins access to the data, I am not sure if it is worth making users need to 'reapply' the setting.

That might work, I will give it a try.

Well, I don't think I am screwed Worst case i need to manually take ownership when I need to access someone's files. I was hoping I'd be able to avoid a new GPO, but my research seems to be taking me that way. When you did the new policy, did it first redirect documents to the users profile and then the new share? If the new share is on the same physical server, is it pretty quick? I am worried about the time it will take my users.

We use redirected folders via a GPO. Everyone's My Documents and Desktop are redirected to a server. This allows us for backup as well as 'roaming' users. The issue is, the share was setup with the root, everyone has access (not a security breach, people cna see a users root folder, but not traverse inside) However, the GPO was setup to grant each user 'exclusive rights' to their own folder. This prohibits domain admins from accessing the data. I've since modified the root share to have full control for Creator/Owner, Domain Admin, and System. However, this permission will not propogate, since the domain admin is not the owner of the user's folder. I've tried to uncheck 'grant exclusive rights' on the GPO, and that works for new redirected folders, but it does not change the status of existing users (even on log on/log off) So the question is, as a domain admin, if I have no permissions/am not the owner on a folder, how can I add permissions to it? Or, more precisely, how can I make it so after the fact, a domain admin can access a redirected folder... Thanks... Manu