?
Solved

User accounts added to a folder without authorization

Posted on 2006-11-19
5
Medium Priority
?
173 Views
Last Modified: 2013-12-04
I am the network administrator and every Friday afternoon I have to copy the DATA folder from the primary HDD to a backup HDD.  A while ago when I was doing it, Server2003 reported that I can't copy the file (or folders) because I don't have the right to it or someone is using it.  Then I right click on the folder -> properties -> security tab, and noticed that some other user accounts were added to this folder without me doing it!  Then I checked some other folders and found out that many folders are having the same weird situation - unauthorized actions of random user account being added to the folder's permission.  And often when I look at the user accounts, they will be changed to SID's - for a short period of time or stays there for a couple of hours.

This creates two problems
1. I as the administrator can't access the folder and contents of it, especially when the user account under the security tab is shown as SID's only.
2. Security issue - sensitive folders such as accounting or management have user accounts added to them and those users are not even related to either of those areas.

Note:  We run Symantec Internet Client Security 3 (NAV 10) and Windows Defender, plus programs like Ad-Aware SE, Spy-bot, etc. and found not Trojans or virus.
0
Comment
Question by:garyoy
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
5 Comments
 
LVL 3

Expert Comment

by:Stekman99
ID: 17980084
Hi,

Is the DATA folder marked as a Offline folder?

Cheers,
Stefan
0
 
LVL 3

Accepted Solution

by:
Stekman99 earned 1000 total points
ID: 17980109
Hi again,

Have a look at this KB as well:
http://support.microsoft.com/kb/310753

Cheers
0
 
LVL 5

Assisted Solution

by:shawnjoyner
shawnjoyner earned 1000 total points
ID: 18967445
Go into the seurity tab under the folder permissions and go to the advanced button.  This will list all users that have rights to the folder.  Go into each and every account and go into the edit feature.  Uncheck "Change Permissions".  After you change all of these you will want to check the box to replace permissions on all folders and child objects.  Click apply and let it change away!  You will want to do this on the root folder.  If it says you do not have permission you will need to log in as administrator go to properties of the share and go to the secureitiess tab and go to advanced.  There you will see an Owner tab.  Take ownership of the folder and then repeat the above steps to locking down the share.  Let me know if you need more information on this!

Shawn
0
 
LVL 1

Expert Comment

by:Computer101
ID: 21101076
Forced accept.

Computer101
EE Admin
0

Featured Post

Bringing Advanced Authentication to the SMB Market

WatchGuard announces the acquisition of advanced authentication provider, Datablink, with one mission – to bring secure authentication to SMB, mid-market, and distributed enterprises with a cloud-based solution, ideal for resale via their established channel & MSSP community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The term "Bad USB" is a buzz word that is usually used when talking about attacks on computer systems that involve USB devices. In this article, I will show what possibilities modern windows systems (win8.x and win10) offer to fight these attacks wi…
Recently, I read that Microsoft has analysed statistics for their security intelligence report. It revealed: still, the clear majority of windows users do their daily work as administrator. An administrative account is a burden, security-wise. My ar…
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…
This tutorial will teach you the special effect of super speed similar to the fictional character Wally West aka "The Flash" After Shake : http://www.videocopilot.net/presets/after_shake/ All lightning effects with instructions : http://www.mediaf…
Suggested Courses
Course of the Month9 days, 14 hours left to enroll

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question