Solved

"Access denied" on Windows Server files locally

Posted on 2011-03-14
7
490 Views
Last Modified: 2012-05-11
After modifiying some permissions on a Windows Server 2003, i have problems accessing subfolders of "D:\DIR\" from the local console. In my example I use YYYYY as one of the erroneous directories.

ROBIN\Administrateur and BUILTIN\Administrators are all defined as OWNERS in each of the directories, but I get an "Access is denied"-error when accessing "D:\DIR\YYYYY" with any Account, even the Administrator accounts.

So I opened the properties->Security tab of the foler and I get the error: "You do not have permission to view or edit the current permission settings for YYYYY, but you can take ownership or change auditing settings."

So I checked what it says, I opened the "Advanced security settings" and checked the "Owner" tab. My current user was listed, but I can't change permissions for the YYYYY directory. (I've tried with local admin and domain admin.)


Summary of the current permissions:

cacls D:\DIR\working_apl
       ROBIN\Administrateur:(OI)(CI)F
       BUILTIN\Administrators:(OI)(CI)F
       ROBIN\Compta:(OI)(CI)F

cacls D:\DIR\XXXXX
       ROBIN\Administrateur:(OI)(CI)F
       BUILTIN\Administrators:(OI)(CI)F
       ROBIN\Compta:(OI)(CI)F

cacls D:\DIR\YYYYY
       Access is denied.
 
0
Comment
Question by:luxpaparazzi
  • 4
  • 3
7 Comments
 
LVL 13

Accepted Solution

by:
Randy_Bojangles earned 500 total points
ID: 35126967
Take ownership of the YYYYY directory and make sure that you tick the box to propogate changes to subfolders and files
0
 

Author Comment

by:luxpaparazzi
ID: 35126988
Well as I wrote, I am already "owner" of all 3 directories.

When I wan't to add a different group to the owners of D:\DIR\ and I set the propagation checkbox I get "Access denied" errors for several subdirectories...
0
 
LVL 13

Assisted Solution

by:Randy_Bojangles
Randy_Bojangles earned 500 total points
ID: 35126996
yep - you are the owner of the directory but that hasnt necessarily propogated to the subfolders - hence the errors you get

Thats why I say to try it again as the administartor, take ownership and propogate
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 

Author Comment

by:luxpaparazzi
ID: 35127009
Ok, I just added the group "compta" and checked "Replaced owner on subcontainers...", I now get some "Access denied" errors.
0
 

Author Comment

by:luxpaparazzi
ID: 35127199
Randy_Bojangles: "Take ownership of the YYYYY directory and make sure that you tick the box to propogate changes to subfolders and files"

Which is perfectly correct, I just want to add the following command:

I thought all listed users would be "Owners", which is NOT correct!
I had to select exactly one from the list and everything was ok.

Thanks Randy_Bojangles!
0
 
LVL 13

Expert Comment

by:Randy_Bojangles
ID: 35127222
So I answered the question "perfectly correct" as you say yet you award no points?
0
 
LVL 13

Expert Comment

by:Randy_Bojangles
ID: 35127236
Thanks for re-closing with points

Glad to have been of help

Andy
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you migrate a Terminal Server licenses server inside the 2008 server family, you can takte advantage of the build-in migration tool. If you like to migrate an older 2003 Server (and the installed client CALs) to a 2008 R2 server for example, you …
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now