File Permission Issue

Posted on 2007-10-03
Last Modified: 2013-12-04
We have just had an issue arise when we began installing Win2k3 Server R2 SP2.  We setup server for dental offices and all of our servers are always setup the same.  Recently when we began installing 2k3 server r2 sp2 we began receiving some wierd permission related issues.  The dental software will create a file .txt, .xml, etc and once it is created it is read only.  The permissions are setup properly on the directories, each user is an admin on the domain and a local admin on the workstation.  Any suggestions?  Is there a utility the will take a directory and reset the permissions.  I don't think the permissions are correct even though windows says they are.
Question by:rtk0909
    LVL 70

    Accepted Solution

    Its not a good idea to go around resetting permissions in the hope it will correct an problem - you need to find the cause - try the effective permissions tool
    LVL 38

    Assisted Solution

    Have you checked both share permissions (on the Sharing tab of Properties) and NTFS permissions (on the Security tab)?

    Server 2003 sets share permissions to Read for Everyone by default.  This would prevent anyone from editing documents as you describe.  If you set share permissions to Full Control for Everyone and then restrict access using NTFS permissions it should correct the problem.

    Also, it's a very bad idea to make all users domain admins.  If the software absolutely requires that they be local administrators then you could add the INTERACTIVE group to the local Administrators group on each PC.  This will make the currently-logged-on user an administrator but will not give them access to other machines over the network.  This limits the potential damage if someone runs a virus-infected email attachment for instance.
    LVL 3

    Expert Comment

    both of the above comments are excellent suggestions to start.  typically there is a single directory that the user needs access to as well as a couple of keys in the registry.  You can find both of those using various tools that can be found on the internet as freeware or shareware.  I prefer process monitor that is distributed by Microsoft for free.

    LVL 52

    Expert Comment

    Are you talking about the properties - read only checkbox? That has nothing to do with ntfs.
    For folders, it is perfectly normal that "read only" is checked. For files of course, it should not be.

    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    Join & Write a Comment

    Many of us in IT utilize a combination of roaming profiles and folder redirection to ensure user information carries over from one workstation to another; in my environment, it was to enable virtualization without needing a separate desktop for each…
    The term "Bad USB" is a buzz word that is usually used when talking about attacks on computer systems that involve USB devices. In this article, I will show what possibilities modern windows systems (win8.x and win10) offer to fight these attacks wi…
    This video discusses moving either the default database or any database to a new volume.
    This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor ( If you're looking for how to monitor bandwidth using netflow or packet s…

    729 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    21 Experts available now in Live!

    Get 1:1 Help Now