Solved

Clean Up Active Directory Permissions SBS 2003

Posted on 2010-11-15
5
330 Views
Last Modified: 2012-05-10
I have an SBS 2003 server, we have a bunch of shared folders. I need to change permissions on these folders. All users are seperated into 2 groups, Staff, Interns. Staff should have access to almost all of the folders, there are 1 or 2 folders only certain staff members should have access to. Interns should have very limited access to a couple folders. I am not sure who initially set all this up but when I look at the permissions of a folder it is a huge mess. Usually on any given folder it has the staff group, interns group, individual users, and lots of "account unknown", etc... Does anyone know how I can maybe wipe out all of the old permissions and start from scratch? Or any other suggestions. Help is very much appreciated. Thanks
0
Comment
Question by:lgg733
  • 2
  • 2
5 Comments
 
LVL 35

Accepted Solution

by:
Joseph Daly earned 300 total points
ID: 34141488
If you want to wipe out ther permissions for all the folders you should be able to go to the top folder and then apply the desired settings you want and then select the option to replace the permissions on all child folders.

Be very careful with this because if you are not sure what you are doing you can cause yourself a whole lot of headache.  security
0
 
LVL 24

Assisted Solution

by:Awinish
Awinish earned 200 total points
ID: 34143658
0
 
LVL 4

Author Comment

by:lgg733
ID: 34145415
Thanks for the help I will look your suggestions over asap. What about the "account unknown"s can I get rid of those?
0
 
LVL 35

Expert Comment

by:Joseph Daly
ID: 34145518
How do they appear in the permissions listing? Do they show as S-1-xxxxxxxxxxx.

If so those are user accounts that are no longer present in AD and should be safe to be removed.
0
 
LVL 4

Author Comment

by:lgg733
ID: 34145649
Yes they do appear like that, I will try and delete them.
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This script can help you clean up your user profile database by comparing profiles to Active Directory users in a particular OU, and removing the profiles that don't match.
This article shows how to deploy dynamic backgrounds to computers depending on the aspect ratio of display
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.

789 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question