Access denied problem

rcschroeder
rcschroeder used Ask the Experts™
on
Granting full permissions to a user does not give access to files in a folder.
The error is not a permissions error, it is an "access denied" error.
Even administrator does not have access to these files.
They were previously accessible by another user.

How can I fix this.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®

Commented:
Have you tried taking Ownership of the folder?
make the administrator the owner,
make sure apply to all subfolders etc is ticked
rcschroederOwner - Parlatech

Author

Commented:
Using the Security tab I have added the user to the folder with full permissions, but I do not think it is a permissions problem, as the error message is "access denied" not the usual permissions error.
When I try to take ownership, Security --> Advanced --> Change Owner. as it tries to change to ownership on each file, it gives the message " An error occurred applying  security information to: 'file path and name'  Access is denied.

How can I fix this?
antivirus? if a file is being detected as a virus the AV may be blocking access to it.
rcschroederOwner - Parlatech

Author

Commented:
Nothing has changed with the antivirus, and these are multiple folders filled with .xos and .doc files that were previously accessible.
rcschroederOwner - Parlatech

Author

Commented:
I looked at thiis http://support.microsoft.com/kb/810881 but this has to do with Windows XP, my problem is on a Windows 2003 server.

Commented:
under sharing - permission , who has the permission?
systechSenior Technical Lead

Commented:
Check the windows firewall, if it is disable please enable it, or if it is already disable plz enable it and try.
rcschroederOwner - Parlatech

Author

Commented:
No this does not make any difference. And it was working fine until this new user was added.
Commented:
Can other users access the folder? or only this user facing the problem.

Did u check under sharing - permissions to see who has access or only check under the security tab
rcschroederOwner - Parlatech

Author

Commented:
The folder is not being shared.
It is set to full access on the Security Tab for those users who should have access to this folder.
I have never had to share individual sub folders before.
I will try to share it to everyone and see if access is available.
If it is, then I will go back and set sharing to a list of persons that should have access and see if that still works.
rcschroederOwner - Parlatech

Author

Commented:
OK I shared the folder to everyone (a security violation of course), just to try it.
It still does not work.

The parent folder, which as a few files, exhibits no problem, the files can be read and saved.
Some files in the folder in question can be read and saved, but most of the files cannot.

rcschroederOwner - Parlatech

Author

Commented:
Additionally, when trying to change the access for any file that is not accessible, even as administrator, the buttons are disabled (greyed out). I thought administrator should be able to do everything.
This could be a Root Kits problem.  Have you run a Root Kits Check? This would certainly be worth doing just in case your AV missed something.

I had a similar problem some time ago and I found that the  command-line tool SubInACL.exe worked for me. (http://www.microsoft.com/downloads/details.aspx?FamilyID=e8ba3e56-d8fe-4a91-93cf-ed6985e3927b&displaylang=en).  

The syntax is relatively straight forward. Below is an example for granting full (F) permissions to the user Harry on mydomain (mydomain\harry) to all files and subfolders in c:\datafiles directory:  

C:>subinacl /subdirectories c:\datafiles\*  /grant=mydomain\harry=F  

I hope this is useful to you.
 
rcschroederOwner - Parlatech

Author

Commented:
All good ideas but nothing worked and the problem still exists
Thank you for the points and I'm sorry that you still have the problem. Here are jsut a few pointers. Can you copy the folder to an external disk and try opening from another PC?  Also, it might be worth booting the server into safe mode and checking accessibility from there?

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial