[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

Server 2003 Subfolder File Permissions

Posted on 2011-10-22
8
Medium Priority
?
307 Views
Last Modified: 2012-08-14
I am having an issue trying to delete certain folders/files on a Windows 2003 server.
I am getting access denied. I know the files are not open. It is an issue with permissions but I can't seem to figure out a way to fix the problem.
When I get an access denied error on a specific folder, the files show on the security tab that administrators only have Read Only Access.  I have tried a variety of methods to change this automatically on all folders/files to give admin modify or full control (not just read only) but nothing seems to work (below are the 5 methods I have used):

1. Main Folder > Security > Grant permission to domain admin
>(check)  Inherit from parent the permission entries that
  apply to child objects.

> (uncheck)  Replace permission entries on all child objects
  with entries show here that apply to child objects
2. Takeown /f foldername /r
3. icacls path\folder /GRANT Administrators:f
4. Unlocker program
5. attrib -s -r -h -a
Any ideas on what else I can do?  
0
Comment
Question by:fjkaykr11
  • 4
  • 4
8 Comments
 
LVL 27

Expert Comment

by:Jason Watkins
ID: 37012676
Can you try specific user permissions instead of group permissions? Explicit perms. always out-weight inherited permissions.

Who owns the folders now? Try the operation, under their account.
0
 
LVL 3

Author Comment

by:fjkaykr11
ID: 37012713
I am looking to do this on a number of folders and files so the owners are varied.
Do you mean I have to go into each folder and file and manually reset the owner?  This would take forever, I need something I can do on a global level from the main folder that contains all the other subfolders and files. When I tried to delete everything I get the access denied error on at least half of the folders.
0
 
LVL 27

Assisted Solution

by:Jason Watkins
Jason Watkins earned 2000 total points
ID: 37012766
Choose "Replace" on the owner for the parent folder.


AdvSecSetsOwners.png
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

 
LVL 3

Author Comment

by:fjkaykr11
ID: 37012838
Thanks for following up with the screenshot. I see it now.  I just tried this, but I am still getting the access denied from the child folder. When I go into the security properties of the subfolder - it looks like what I am doing in the parent folder does not propogate down to child folders.
0
 
LVL 27

Accepted Solution

by:
Jason Watkins earned 2000 total points
ID: 37012937
Sounds like inheritance was broken. Make sure properties are set to propagate from parent to child by resetting the permissions on the parent and replacing the permissions on the child with those.

0
 
LVL 3

Author Comment

by:fjkaykr11
ID: 37012976
Finally, that did it. I had to do both in order for this to work, when I tried each method individually it didn't work. Note: I had to do it on the Subfolder as well though, it didn't carry from the main folder. Also, I still couldn't delete the main folder from explorer, I had to do the RD command from the CMD prompt
Here is what I did to finally get all the folders and files deleted:
 Folder > Security Tab > Advanced:
Permissions:
* Check off replace permission entries on all child objects
  with entries shown here
OWner:
* Replace owner on subcontainers and objects
Delete subfolders and files
Command prompt:  >RD ParentFolder /s /q

Thanks for helping finally get this figured out.
0
 
LVL 3

Author Closing Comment

by:fjkaykr11
ID: 37012979
I needed to do a combination of steps in order to finally fix this. Thanks.
0
 
LVL 27

Expert Comment

by:Jason Watkins
ID: 37013121
Glad you were able to get this fixed.
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Learn about cloud computing and its benefits for small business owners.
A safe way to clean winsxs folder from your windows server 2008 R2 editions
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
Suggested Courses

873 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question