hoặc được quyền ủy nhiệm đặc biệt để có thể làm việc với GPO trong OU. Đối với Group Policy, cho phép phân chủ yếu là giới hạn để quản lý các liên kết Group Policy và RSoP cho các mục đích khai thác gỗ và lập kế hoạch. Không giống như các trang web GPO, | 268 Part II Group Policy Implementation and Scenarios To allow administrators to access existing profile folders complete the following steps 1. Log on to the profile server using an account that has administrator privileges. 2. In Windows Explorer locate the user s profile folder. Right-click it and then choose Properties. 3. When you see a warning prompt telling you that you do not have permission to access the profile folder but can take ownership click OK. 4. In the Properties dialog box click the Security tab and then click Advanced. 5. In the Advanced Security Settings dialog box click the Owner tab. 6. Under Change Owner To click Administrators and then select the Replace Owners On Subcontainers And Objects check box. 7. Click OK. When prompted to confirm that you want to take ownership of the folder click Yes. 8. You are prompted to close and open the folder s Properties dialog box before you can view or change permissions. Click OK three times to close all open dialog boxes. 9. In Windows Explorer right-click the user s profile folder and then choose Properties. 10. In the Properties dialog box click the Security tab and then click Advanced. 11. In the Advanced Security Settings For dialog box click Add. 12. In the Select Users Computers Or Groups dialog box type the user s logon account name and then click Check Names. If the name is shown correctly click OK. 13. In the Permissions Entry For dialog box select This Folder Subfolders And Files under Apply Onto and then select Allow for Full Control. Click OK. Caution In the Entry For dialog box Apply These Permissions To Objects And Or Containers Within This Container Only is not selected by default. Do not select this option. If you do permissions will not be set correctly. For example if this option is selected a user logging on would see a specific error related to not being able to read the contents of the Application Data Identities folder. If a user sees such an error during logon you need to open the
