Solved

Server 2008 NTFS Permissions

Posted on 2009-05-05
4
845 Views
Last Modified: 2012-05-06
I have two issues; Im building a 2008 file server,
1.      The issue is in 2008, I've created a new drive and the permissions are; creator owner, everyone, systems, administrators, users (server).  When I remove the users and everyone, I can longer get into the folder, permission is denied, though I'm a domain admin and yes the domain admin is in the servers local admin group.  
2.      I dont mind inheriting permissions, but I want to be able to copy over permissions and then remove those users/groups I do not want, but I dont see anyway.
0
Comment
Question by:Puke Foo
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 58

Accepted Solution

by:
tigermatt earned 500 total points
ID: 24307992

> #1

This is by design. In your 'normal' user token (before having elevated at a UAC prompt) you do not have any Administrator privileges. Therefore, the Administrator group does not apply, and you are denied access.

If you elevate a UAC prompt or run a program as Administrator, that is the only time you have true Admin privileges on your account and will have access to the drive.

Currently, this is a known issue with Windows Server 2008 and NTFS file permissions. At present, the only way around this is to make the user a member of another, custom group which has the permissions assigned on the drive. This will give you access to the drive without elevating at UAC.

> #2

I'm not too sure what you're talking about. If you need to copy files between servers/shares and retain their NTFS permissions, look at the robocopy tool with the /COPYALL switch.

-Matt
0
 

Author Comment

by:Puke Foo
ID: 24308703
The first answer is perfect, thank you.  

The second, I'm referring to server 2003, if I choice to not inherent permissions I can uncheck "allow inheritable from the parent to propagate etc..." then I get the option of copy or remove.  I choice copy and then remove the group/users or add the groups/users I want.  I don't seem to be able to accomplish this.  I can't choose to remove inheritable permissions, anyone know how?
0
 
LVL 58

Expert Comment

by:tigermatt
ID: 24318393

So to clarify matters, if you uncheck the inherit option, and you press 'Remove', no permissions are removed?

-Matt
0
 

Author Comment

by:Puke Foo
ID: 24453096
I've figured it out with your help thanks tigermatt
0

Featured Post

Online Training Solution

Drastically shorten your training time with WalkMe's advanced online training solution that Guides your trainees to action. Forget about retraining and skyrocket knowledge retention rates.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I had a question today where the user wanted to know how to delete an SSL Certificate, so I thought that I would quickly add this How to! Article for your reference. WHY WOULD YOU WANT TO DELETE A CERTIFICATE? 1. If an incorrect certificate was …
You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

737 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question