Solved

"Access denied" on Windows Server files locally

Posted on 2011-03-14
7
500 Views
Last Modified: 2012-05-11
After modifiying some permissions on a Windows Server 2003, i have problems accessing subfolders of "D:\DIR\" from the local console. In my example I use YYYYY as one of the erroneous directories.

ROBIN\Administrateur and BUILTIN\Administrators are all defined as OWNERS in each of the directories, but I get an "Access is denied"-error when accessing "D:\DIR\YYYYY" with any Account, even the Administrator accounts.

So I opened the properties->Security tab of the foler and I get the error: "You do not have permission to view or edit the current permission settings for YYYYY, but you can take ownership or change auditing settings."

So I checked what it says, I opened the "Advanced security settings" and checked the "Owner" tab. My current user was listed, but I can't change permissions for the YYYYY directory. (I've tried with local admin and domain admin.)


Summary of the current permissions:

cacls D:\DIR\working_apl
       ROBIN\Administrateur:(OI)(CI)F
       BUILTIN\Administrators:(OI)(CI)F
       ROBIN\Compta:(OI)(CI)F

cacls D:\DIR\XXXXX
       ROBIN\Administrateur:(OI)(CI)F
       BUILTIN\Administrators:(OI)(CI)F
       ROBIN\Compta:(OI)(CI)F

cacls D:\DIR\YYYYY
       Access is denied.
 
0
Comment
Question by:luxpaparazzi
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
7 Comments
 
LVL 13

Accepted Solution

by:
Randy_Bojangles earned 500 total points
ID: 35126967
Take ownership of the YYYYY directory and make sure that you tick the box to propogate changes to subfolders and files
0
 

Author Comment

by:luxpaparazzi
ID: 35126988
Well as I wrote, I am already "owner" of all 3 directories.

When I wan't to add a different group to the owners of D:\DIR\ and I set the propagation checkbox I get "Access denied" errors for several subdirectories...
0
 
LVL 13

Assisted Solution

by:Randy_Bojangles
Randy_Bojangles earned 500 total points
ID: 35126996
yep - you are the owner of the directory but that hasnt necessarily propogated to the subfolders - hence the errors you get

Thats why I say to try it again as the administartor, take ownership and propogate
0
Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

 

Author Comment

by:luxpaparazzi
ID: 35127009
Ok, I just added the group "compta" and checked "Replaced owner on subcontainers...", I now get some "Access denied" errors.
0
 

Author Comment

by:luxpaparazzi
ID: 35127199
Randy_Bojangles: "Take ownership of the YYYYY directory and make sure that you tick the box to propogate changes to subfolders and files"

Which is perfectly correct, I just want to add the following command:

I thought all listed users would be "Owners", which is NOT correct!
I had to select exactly one from the list and everything was ok.

Thanks Randy_Bojangles!
0
 
LVL 13

Expert Comment

by:Randy_Bojangles
ID: 35127222
So I answered the question "perfectly correct" as you say yet you award no points?
0
 
LVL 13

Expert Comment

by:Randy_Bojangles
ID: 35127236
Thanks for re-closing with points

Glad to have been of help

Andy
0

Featured Post

Ransomware: The New Cyber Threat & How to Stop It

This infographic explains ransomware, type of malware that blocks access to your files or your systems and holds them hostage until a ransom is paid. It also examines the different types of ransomware and explains what you can do to thwart this sinister online threat.  

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

New Windows 7 Installations take days for Windows-Updates to show up and install. This can easily be fixed. I have finally decided to write an article because this seems to get asked several times a day lately. This Article and the Links apply to…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
Suggested Courses

617 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question