Solved

User accounts added to a folder without authorization

Posted on 2006-11-19
5
172 Views
Last Modified: 2013-12-04
I am the network administrator and every Friday afternoon I have to copy the DATA folder from the primary HDD to a backup HDD.  A while ago when I was doing it, Server2003 reported that I can't copy the file (or folders) because I don't have the right to it or someone is using it.  Then I right click on the folder -> properties -> security tab, and noticed that some other user accounts were added to this folder without me doing it!  Then I checked some other folders and found out that many folders are having the same weird situation - unauthorized actions of random user account being added to the folder's permission.  And often when I look at the user accounts, they will be changed to SID's - for a short period of time or stays there for a couple of hours.

This creates two problems
1. I as the administrator can't access the folder and contents of it, especially when the user account under the security tab is shown as SID's only.
2. Security issue - sensitive folders such as accounting or management have user accounts added to them and those users are not even related to either of those areas.

Note:  We run Symantec Internet Client Security 3 (NAV 10) and Windows Defender, plus programs like Ad-Aware SE, Spy-bot, etc. and found not Trojans or virus.
0
Comment
Question by:garyoy
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
5 Comments
 
LVL 3

Expert Comment

by:Stekman99
ID: 17980084
Hi,

Is the DATA folder marked as a Offline folder?

Cheers,
Stefan
0
 
LVL 3

Accepted Solution

by:
Stekman99 earned 250 total points
ID: 17980109
Hi again,

Have a look at this KB as well:
http://support.microsoft.com/kb/310753

Cheers
0
 
LVL 5

Assisted Solution

by:shawnjoyner
shawnjoyner earned 250 total points
ID: 18967445
Go into the seurity tab under the folder permissions and go to the advanced button.  This will list all users that have rights to the folder.  Go into each and every account and go into the edit feature.  Uncheck "Change Permissions".  After you change all of these you will want to check the box to replace permissions on all folders and child objects.  Click apply and let it change away!  You will want to do this on the root folder.  If it says you do not have permission you will need to log in as administrator go to properties of the share and go to the secureitiess tab and go to advanced.  There you will see an Owner tab.  Take ownership of the folder and then repeat the above steps to locking down the share.  Let me know if you need more information on this!

Shawn
0
 
LVL 1

Expert Comment

by:Computer101
ID: 21101076
Forced accept.

Computer101
EE Admin
0

Featured Post

Threat Trends for MSPs to Watch

See the findings.
Despite its humble beginnings, phishing has come a long way since those first crudely constructed emails. Today, phishing sites can appear and disappear in the length of a coffee break, and it takes more than a little know-how to keep your clients secure.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The term "Bad USB" is a buzz word that is usually used when talking about attacks on computer systems that involve USB devices. In this article, I will show what possibilities modern windows systems (win8.x and win10) offer to fight these attacks wi…
Users of Windows 10 Professional can disable automatic reboots using the policy editor. This tool is not included in the Windows home edition. But don't worry! Follow the instructions below to install (a Win7) policy editor on your Windows 10 Home e…
In this video we outline the Physical Segments view of NetCrunch network monitor. By following this brief how-to video, you will be able to learn how NetCrunch visualizes your network, how granular is the information collected, as well as where to f…
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…

724 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question