[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 175
  • Last Modified:

User accounts added to a folder without authorization

I am the network administrator and every Friday afternoon I have to copy the DATA folder from the primary HDD to a backup HDD.  A while ago when I was doing it, Server2003 reported that I can't copy the file (or folders) because I don't have the right to it or someone is using it.  Then I right click on the folder -> properties -> security tab, and noticed that some other user accounts were added to this folder without me doing it!  Then I checked some other folders and found out that many folders are having the same weird situation - unauthorized actions of random user account being added to the folder's permission.  And often when I look at the user accounts, they will be changed to SID's - for a short period of time or stays there for a couple of hours.

This creates two problems
1. I as the administrator can't access the folder and contents of it, especially when the user account under the security tab is shown as SID's only.
2. Security issue - sensitive folders such as accounting or management have user accounts added to them and those users are not even related to either of those areas.

Note:  We run Symantec Internet Client Security 3 (NAV 10) and Windows Defender, plus programs like Ad-Aware SE, Spy-bot, etc. and found not Trojans or virus.
0
garyoy
Asked:
garyoy
  • 2
2 Solutions
 
Stekman99Commented:
Hi,

Is the DATA folder marked as a Offline folder?

Cheers,
Stefan
0
 
Stekman99Commented:
Hi again,

Have a look at this KB as well:
http://support.microsoft.com/kb/310753

Cheers
0
 
shawnjoynerCommented:
Go into the seurity tab under the folder permissions and go to the advanced button.  This will list all users that have rights to the folder.  Go into each and every account and go into the edit feature.  Uncheck "Change Permissions".  After you change all of these you will want to check the box to replace permissions on all folders and child objects.  Click apply and let it change away!  You will want to do this on the root folder.  If it says you do not have permission you will need to log in as administrator go to properties of the share and go to the secureitiess tab and go to advanced.  There you will see an Owner tab.  Take ownership of the folder and then repeat the above steps to locking down the share.  Let me know if you need more information on this!

Shawn
0
 
Computer101Commented:
Forced accept.

Computer101
EE Admin
0

Featured Post

Prep for the ITIL® Foundation Certification Exam

December’s Course of the Month is now available! Enroll to learn ITIL® Foundation best practices for delivering IT services effectively and efficiently.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now