[Last Call] Learn how to a build a cloud-first strategyRegister Now


Why does a shared folder on my Windows 2003 server keep losing its assigned access rights?

Posted on 2011-04-27
Medium Priority
Last Modified: 2012-08-13
Have been unsuccessful at trying to get logon scripts to work on my Windows 2003 domain through Group Policy. Using GPO editor I discovered that the Default Group Policy object was disabled and there was another group policy object that was apparently created to replace it.
I enabled the original and deleted the replacement. Now access to one of the shared folders has been lost to everyone execpt Administrators and when I try to add other users or groups they disappear after a couple of minutes. All other shares seem to be working okay, just this one is having a problem. Where should I be looking to fix this? Clients are Windows XP pro.
Question by:ru-rd
LVL 43

Accepted Solution

Adam Brown earned 2000 total points
ID: 35479749
It's possible the ACL for the folder is being modified by a GPO. Check your GPOs for settings in Computer Configuration\Windows Settings\Security Settings\File System.

Author Comment

ID: 35479857
As suggested I went to the shared folder through GPO and found only Administrators had access. I added the required group and so far it seems to be persisting. I will know tomorrow if the changes were retained overnight.
LVL 43

Expert Comment

by:Adam Brown
ID: 35479892
You'll need to run GPUpdate for the changes to take affect.
Get free NFR key for Veeam Availability Suite 9.5

Veeam is happy to provide a free NFR license (1 year, 2 sockets) to all certified IT Pros. The license allows for the non-production use of Veeam Availability Suite v9.5 in your home lab, without any feature limitations. It works for both VMware and Hyper-V environments


Expert Comment

by:Vishal Patel
ID: 35481981
Try to change NTFS security setting for that folder in align with your current sharing rights.
You can do so by right clicking on folder and go to security and add users for the rights.

Expert Comment

ID: 35482075
make sure the GPO is not being skipped by another enforced GPO

Author Closing Comment

ID: 35482992
Thanks for your speedy solution! Obviously I have a lot to learn about GPO. Your service is definitely a valuable resource.

Featured Post

Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Auditing domain password hashes is a commonly overlooked but critical requirement to ensuring secure passwords practices are followed. Methods exist to extract hashes directly for a live domain however this article describes a process to extract u…
How to deal with a specific error when using the Enable-RemoteMailbox cmdlet to create a mailbox in the cloud-based service, for an existing user in an on-premises Active Directory.
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.

829 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question