By default, Windows folder redirection gives users exclusive rights to redirected folders. To grant domain administrators access to existing redirected folders, you must use the icacls utility.

If you are setting up new redirected folders for use with View Persona Management, you can make the newly redirected folders accessible to domain administrators by using the Add the administrators group to redirected folders group policy setting. See Group Policy Settings That Control Folder Redirection.

Procedure

  1. Set ownership for the administrator on the files and folders.
    icacls "\\file-server\persona-share\*" /setowner "domain\admin" /T /C /L /Q
    For example: icacls "\\myserver-123abc\folders\*" /setowner "mycompanydomain\vcadmin" /T /C /L /Q
  2. Modify the ACLs for the files and folders.
    icacls "\\file-server\persona-share\*" /grant "admin-group":F /T /C /L /Q
    For example: icacls "\\myserver-123abc\folders\*" /grant "Domain-Admins":F /T /C /L /Q
  3. For each user folder, revert ownership from the administrator to the corresponding user.
    icacls "\\file-server\persona-share\*" /setowner "domain\folder-owner" /T /C /L /Q
    For example: icacls "\\myserver-123abc\folders\*" /setowner "mycompanydomain\user1" /T /C /L /Q