Solved

Clean Up Active Directory Permissions SBS 2003

Posted on 2010-11-15
5
315 Views
Last Modified: 2012-05-10
I have an SBS 2003 server, we have a bunch of shared folders. I need to change permissions on these folders. All users are seperated into 2 groups, Staff, Interns. Staff should have access to almost all of the folders, there are 1 or 2 folders only certain staff members should have access to. Interns should have very limited access to a couple folders. I am not sure who initially set all this up but when I look at the permissions of a folder it is a huge mess. Usually on any given folder it has the staff group, interns group, individual users, and lots of "account unknown", etc... Does anyone know how I can maybe wipe out all of the old permissions and start from scratch? Or any other suggestions. Help is very much appreciated. Thanks
0
Comment
Question by:lgg733
  • 2
  • 2
5 Comments
 
LVL 35

Accepted Solution

by:
Joseph Daly earned 300 total points
ID: 34141488
If you want to wipe out ther permissions for all the folders you should be able to go to the top folder and then apply the desired settings you want and then select the option to replace the permissions on all child folders.

Be very careful with this because if you are not sure what you are doing you can cause yourself a whole lot of headache.  security
0
 
LVL 24

Assisted Solution

by:Awinish
Awinish earned 200 total points
ID: 34143658
0
 
LVL 4

Author Comment

by:lgg733
ID: 34145415
Thanks for the help I will look your suggestions over asap. What about the "account unknown"s can I get rid of those?
0
 
LVL 35

Expert Comment

by:Joseph Daly
ID: 34145518
How do they appear in the permissions listing? Do they show as S-1-xxxxxxxxxxx.

If so those are user accounts that are no longer present in AD and should be safe to be removed.
0
 
LVL 4

Author Comment

by:lgg733
ID: 34145649
Yes they do appear like that, I will try and delete them.
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Mapping Drives using Group policy preferences Are you still using old scripts to map your network drives if so this article will show you how to get away for old scripts and move toward Group Policy Preference for mapping them. First things f…
Resolve DNS query failed errors for Exchange
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

932 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now