Solved

User accounts added to a folder without authorization

Posted on 2006-11-19
5
167 Views
Last Modified: 2013-12-04
I am the network administrator and every Friday afternoon I have to copy the DATA folder from the primary HDD to a backup HDD.  A while ago when I was doing it, Server2003 reported that I can't copy the file (or folders) because I don't have the right to it or someone is using it.  Then I right click on the folder -> properties -> security tab, and noticed that some other user accounts were added to this folder without me doing it!  Then I checked some other folders and found out that many folders are having the same weird situation - unauthorized actions of random user account being added to the folder's permission.  And often when I look at the user accounts, they will be changed to SID's - for a short period of time or stays there for a couple of hours.

This creates two problems
1. I as the administrator can't access the folder and contents of it, especially when the user account under the security tab is shown as SID's only.
2. Security issue - sensitive folders such as accounting or management have user accounts added to them and those users are not even related to either of those areas.

Note:  We run Symantec Internet Client Security 3 (NAV 10) and Windows Defender, plus programs like Ad-Aware SE, Spy-bot, etc. and found not Trojans or virus.
0
Comment
Question by:garyoy
  • 2
5 Comments
 
LVL 3

Expert Comment

by:Stekman99
ID: 17980084
Hi,

Is the DATA folder marked as a Offline folder?

Cheers,
Stefan
0
 
LVL 3

Accepted Solution

by:
Stekman99 earned 250 total points
ID: 17980109
Hi again,

Have a look at this KB as well:
http://support.microsoft.com/kb/310753

Cheers
0
 
LVL 5

Assisted Solution

by:shawnjoyner
shawnjoyner earned 250 total points
ID: 18967445
Go into the seurity tab under the folder permissions and go to the advanced button.  This will list all users that have rights to the folder.  Go into each and every account and go into the edit feature.  Uncheck "Change Permissions".  After you change all of these you will want to check the box to replace permissions on all folders and child objects.  Click apply and let it change away!  You will want to do this on the root folder.  If it says you do not have permission you will need to log in as administrator go to properties of the share and go to the secureitiess tab and go to advanced.  There you will see an Owner tab.  Take ownership of the folder and then repeat the above steps to locking down the share.  Let me know if you need more information on this!

Shawn
0
 
LVL 1

Expert Comment

by:Computer101
ID: 21101076
Forced accept.

Computer101
EE Admin
0

Featured Post

Backup Your Microsoft Windows Server®

Backup all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

Join & Write a Comment

As I write this article, I am finishing cleanup from the Qakbot virus variant found in the wild on April 18, 2011.  It was a messy beast that had varying levels of infection, speculated as being dependent on how long it resided on the infected syste…
Many people tend to confuse the function of a virus with the one of adware, this misunderstanding of the basic of what each software is and how it operates causes users and organizations to take the wrong security measures that would protect them ag…
This video demonstrates how to create an example email signature rule for a department in a company using CodeTwo Exchange Rules. The signature will be inserted beneath users' latest emails in conversations and will be displayed in users' Sent Items…
You have products, that come in variants and want to set different prices for them? Watch this micro tutorial that describes how to configure prices for Magento super attributes. Assigning simple products to configurable: We assigned simple products…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now