Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Can't access files ~ access denied

Posted on 2008-10-28
4
Medium Priority
?
250 Views
Last Modified: 2012-05-05
Modified a folder granted full control to new group set the group everyone to deny! Then backed out that change.  Now lots of files can't be accessed and there is no owner. Any ideas on what happended and how to resolve?
0
Comment
Question by:YCHJim
  • 2
  • 2
4 Comments
 
LVL 14

Accepted Solution

by:
cuziyq earned 500 total points
ID: 22823059
You must either be a domain administrator, or a local admin on the computer in question.  Take ownership of the folder, then change the permissions.  Make sure you chose to replace permissions on child objects so the change propagates down to everything inside it (just to make sure).

The owner always has full access to the folder, even if Windows gripes that you don't.
0
 

Author Closing Comment

by:YCHJim
ID: 31510781
Any reason on why the ownership on newer files was suddenly removed and older files still had owners were not affected and had ownersship as either Administrators or Domain\User?
0
 

Author Comment

by:YCHJim
ID: 22823137
Any reason why suddently newer files had no owner and older files had ownership set to Administrators or Domain\user?
0
 
LVL 14

Expert Comment

by:cuziyq
ID: 22823360
They had owners I am sure.  Windows was probably just hiding them from you because it was told to deny you access.  But being admin and owner is your ace in the hole.  You can tell Windows to block access for users with this level of access, and Windows will even behave as if it's attempting to do so.  But the bottom line is that you cannot block access to the admin/owner of a folder.

If the admin/owner is not in the permissions list, or is specifically set to deny access, you still have access.  You just can't trust what Windows tells you about it until that situation is rectified.
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Auditing domain password hashes is a commonly overlooked but critical requirement to ensuring secure passwords practices are followed. Methods exist to extract hashes directly for a live domain however this article describes a process to extract u…
A hard and fast method for reducing Active Directory Administrators members.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
Suggested Courses

971 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question