Our users have the default recommended permissions for their Redirected Documents folders that do not include any access permissions for the Administrators group.
Very frequently administrators have a need to go into these folders. The most current reason is that we need to share out the folder containing their Outlook PST files so we can import these files into their new Archive mailboxes and then get rid of the PSTs.
The users cannot even do this themselves because they cannot create shares when they are accessing their Documents folder through a redirected network share.
The administrator must log in locally to the file server, take ownership of the user's entire My Documents folder, grant the Administrators group full control, then drill down to the folder containing the PST files and grant Exchange Trusted Subsystem modify access, then share that folder with the Exchange Trusted Subsystem also having at least Modify access through the share.
One problem we are having is when we take ownership and grant the Administrators group full control, somehow during this process, the user loses their permissions to the files and folders and we end up having to manually grant permissions back to the user for folders and then the subfolders below. Then we need to change the ownership back the user so file audits show correctly as belonging to the user rather than belonging to the administrators group.
What is the most streamlined way to accomplish these access permission changes and then put everything back they way they were when the import in their Exchange mailbox is complete?
How can we grant local server administrators group members and domain Exchange Trusted Subsystem permissions after taking ownership without the user losing their permissions as part of the process?