[W2K3] CHKDSK reset all file permissions

Posted on 2004-10-27
Last Modified: 2008-01-09
Last friday I rebooted one of our servers. When it came up, it ran checkdisk, but then chkdsk said "Replacing invalid security id with default security" and it did just that: on one of the disks it replaced ALL file permissions with default permissions (so only Administrators and system had access to the files). We had to reset the file permissions by hand.

Searching for a reason for this I found;en-us;831374 (The CHKDSK utility incorrectly identifies and deletes in-use security descriptors), which describes that this can happen when a volume contains over 4,194,303 files, and/or the Master File Table on the volume is over 4 GB in size. However, if I understand it correctly, it would only reset permissions for the files after 4,194,303, so the first 4,194,303 file permissions would remain intact. Same for the MFT: only files whose entry is "after" 4 GB in the MFT would be reset, the rest of the permissions should remain intact. However, in my situation, the permissions on all files were changed. The disk contains some 900.000 files.

Another article I found describes my problem better: Here a bug in chkdsk is described where permissions on all files on a volume would be reset to default permissions, however, this article applies to Windows 2000 Server only and I'm running Windows Server 2003. The problem has been fixed in servicepack 4 so I guess it should be solved in Windows Server 2003 as well. I haven't been able to find a 2003-version of this article.

I'm wondering, since none of these articles accurately describe my problem, if one of 'm could apply to my situation, or if anyone knows another reason why checkdisk reset all permissions?
Question by:senorsnor
    1 Comment
    LVL 2

    Accepted Solution

    Why you ask?  I think it's a simple answer really...  Microsoft.

    Fixed in Service Pack 4?  That may mean it will be fixed in Server 2003 when they come out with Service Pack 4.   Just a possiblity.  :)

    As to a fix?  Can you restore a previous backup of the drive?  NTFS file permissions should be restored as well...   I forget the exceptions at the moment...  

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    IT, Stop Being Called Into Every Meeting

    Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

    I have written before on the benefits of using a Boot media other than your HDD when it has become infected.   The article I wrote about creating a bootable CD/DVD/USB ( was mainly concerned with building a UBCD4Win on CD …
    Having issues meeting security compliance criteria because of those pesky USB drives? Then I can help you! This article will explain how to disable USB Mass Storage devices in Windows Server 2008 R2.
    This video teaches viewers how to encrypt an external drive that requires a password to read and edit the drive. All tasks are done in Disk Utility. Plug in the external drive you wish to encrypt: Make sure all previous data on the drive has been …
    This Micro Tutorial will teach you how to reformat your flash drive. Sometimes your flash drive may have issues carrying files so this will completely restore it to manufacturing settings. Make sure to backup all files before reformatting. This w…

    884 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now