 Noah VailSon made my AvatarPremium
join:2004-12-10
Lorton, VA
kudos:1
 ·Bright House
 ·Sprint Mobile Br..
| reply to rchandra
Re: Dang said by rchandra:A few potential problems with this approach: Depending on settings/policies/GPOs, the files' owner may need to be the target/logged in user, not the domain admin group. setacl is a good and free utility for setting this. Much of the Roaming Profile requires ownership by the Domain Administrators group to function properly. It's also the default ownership group.
Initially granting (and propagating) full permissions, on the profile folder, to the user/usergroup will allow the domain user account to tweak individual file ownership as it needs.
I don't recall if I've used setacl. Does it have advantage over cacls?
said by rchandra:Registry entries likewise may need ownership or ACL changes; these are stored in ntuser.dat. I don't know for 100% certain, but I believe this is what the "copy profile" GUI/utility does (in XP Pro, maybe others) when you fill in the "allowed to use this profile". I can't speak to XP's profile copy feature. It gave me trouble when migrating between different forests. That was when it was first available. I couldn't find the in-depth documentation I needed, at the time.
I just stayed with what had been working for me. I also have a bias toward a more hands on approach.
said by rchandra:(BTW, Noah...the third person, gender neutral, possessive pronoun,"its," does not have an apostrophe. So I think you meant to write "...the user's profile to its home on the...") If you think I meant to write that, then why the correction?
Now, you've forced me to throw the flag down on your play.
Always Vigilant
NV
--
In my perfect religion, a giant hole appears and sucks up all the lousy people.
I call it the Crapture. |
 rchandraStargate Universe fanPremium
join:2000-11-09
14225-2105 | Re: setacl
I guess I come from the opposite perspective, I've seen but never used cacls. I will say that if it can be protected, setacl can manipulate any ACEs for it: services, shares, filesystem objects, registry entries, not sure what else. It can set ownership, list out the ACEs, owner, group, inheritance...just about anything. And it can work with either names or SIDs, your choice. One thing really handy for migrations is changing all that sort of stuff from one user in one domain to the same name in another domain.
As for applicability to migrating a profile directory tree from a local profile to a domain server...not sure is it any better or worse than cacls.
»setacl.sourceforge.net/
There was a service I wanted to start/stop as a "normal" user, and the only tool I knew about at the time which could add an appropriate ACE was setacl; that one is even in their usage examples page.
The program even has ways to back up all that owner/group/ACE information, and restore it later.
Re: its
You asked, "why the correction."
I'll just say that I'm not so presumptuous to know the EXACT intent of ANY writer, just a statistically large probability, ergo the phrasing "I think you meant." As my .sig says, it's a difficult enough life trying to understand people when the rules are followed. To my way of thinking, while I realize there is a certain point where negativity has worse effects, more correct usage begets more correct usage, because the correct way is seen more than the incorrect way. If nothing more, the subconsciouses of more readers see more correct usages, and they will tend to write better, thus reducing misinterpretation possibilities. I realize the gamut of reaction is all the way from appreciation to outright hatred, and I apologize if this offends some.
But that is an interesting flag.
--
English is a difficult enough language to interpret correctly when its rules are followed, let alone when a writer chooses not to follow those rules.
Jeopardy! replies REALLY suck! |
