Solved

Can't access files ~ access denied

Posted on 2008-10-28
4
237 Views
Last Modified: 2012-05-05
Modified a folder granted full control to new group set the group everyone to deny! Then backed out that change.  Now lots of files can't be accessed and there is no owner. Any ideas on what happended and how to resolve?
0
Comment
Question by:YCHJim
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 14

Accepted Solution

by:
cuziyq earned 125 total points
ID: 22823059
You must either be a domain administrator, or a local admin on the computer in question.  Take ownership of the folder, then change the permissions.  Make sure you chose to replace permissions on child objects so the change propagates down to everything inside it (just to make sure).

The owner always has full access to the folder, even if Windows gripes that you don't.
0
 

Author Closing Comment

by:YCHJim
ID: 31510781
Any reason on why the ownership on newer files was suddenly removed and older files still had owners were not affected and had ownersship as either Administrators or Domain\User?
0
 

Author Comment

by:YCHJim
ID: 22823137
Any reason why suddently newer files had no owner and older files had ownership set to Administrators or Domain\user?
0
 
LVL 14

Expert Comment

by:cuziyq
ID: 22823360
They had owners I am sure.  Windows was probably just hiding them from you because it was told to deny you access.  But being admin and owner is your ace in the hole.  You can tell Windows to block access for users with this level of access, and Windows will even behave as if it's attempting to do so.  But the bottom line is that you cannot block access to the admin/owner of a folder.

If the admin/owner is not in the permissions list, or is specifically set to deny access, you still have access.  You just can't trust what Windows tells you about it until that situation is rectified.
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

This article describes my battle tested process for setting up delegation. I use this process anywhere that I need to setup delegation. In the article I will show how it applies to Active Directory
This article demonstrates probably the easiest way to configure domain-wide tier isolation within Active Directory. If you do not know tier isolation read https://technet.microsoft.com/en-us/windows-server-docs/security/securing-privileged-access/s…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question