"Access denied" on Windows Server files locally

After modifiying some permissions on a Windows Server 2003, i have problems accessing subfolders of "D:\DIR\" from the local console. In my example I use YYYYY as one of the erroneous directories.

ROBIN\Administrateur and BUILTIN\Administrators are all defined as OWNERS in each of the directories, but I get an "Access is denied"-error when accessing "D:\DIR\YYYYY" with any Account, even the Administrator accounts.

So I opened the properties->Security tab of the foler and I get the error: "You do not have permission to view or edit the current permission settings for YYYYY, but you can take ownership or change auditing settings."

So I checked what it says, I opened the "Advanced security settings" and checked the "Owner" tab. My current user was listed, but I can't change permissions for the YYYYY directory. (I've tried with local admin and domain admin.)


Summary of the current permissions:

cacls D:\DIR\working_apl
       ROBIN\Administrateur:(OI)(CI)F
       BUILTIN\Administrators:(OI)(CI)F
       ROBIN\Compta:(OI)(CI)F

cacls D:\DIR\XXXXX
       ROBIN\Administrateur:(OI)(CI)F
       BUILTIN\Administrators:(OI)(CI)F
       ROBIN\Compta:(OI)(CI)F

cacls D:\DIR\YYYYY
       Access is denied.
 
luxpaparazziAsked:
Who is Participating?

[Webinar] Streamline your web hosting managementRegister Today

x
 
Randy_BojanglesConnect With a Mentor Commented:
Take ownership of the YYYYY directory and make sure that you tick the box to propogate changes to subfolders and files
0
 
luxpaparazziAuthor Commented:
Well as I wrote, I am already "owner" of all 3 directories.

When I wan't to add a different group to the owners of D:\DIR\ and I set the propagation checkbox I get "Access denied" errors for several subdirectories...
0
 
Randy_BojanglesConnect With a Mentor Commented:
yep - you are the owner of the directory but that hasnt necessarily propogated to the subfolders - hence the errors you get

Thats why I say to try it again as the administartor, take ownership and propogate
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
luxpaparazziAuthor Commented:
Ok, I just added the group "compta" and checked "Replaced owner on subcontainers...", I now get some "Access denied" errors.
0
 
luxpaparazziAuthor Commented:
Randy_Bojangles: "Take ownership of the YYYYY directory and make sure that you tick the box to propogate changes to subfolders and files"

Which is perfectly correct, I just want to add the following command:

I thought all listed users would be "Owners", which is NOT correct!
I had to select exactly one from the list and everything was ok.

Thanks Randy_Bojangles!
0
 
Randy_BojanglesCommented:
So I answered the question "perfectly correct" as you say yet you award no points?
0
 
Randy_BojanglesCommented:
Thanks for re-closing with points

Glad to have been of help

Andy
0
All Courses

From novice to tech pro — start learning today.