We help IT Professionals succeed at work.

User folder permissions on Server 2008

LarryDAH
LarryDAH asked
on
I have a user who should have full permissions on a folder and its subfolders according to AD and to the 'Effective Permissions' test you can run on a user against a folder, but he can move one or two files in the folder then gets 'permission denied by administrator. He is on Windows 7 and the Server is 2008, both are fully patched. I have run gpupdate /force on his PC. Why would his permissins keep changing?
Comment
Watch Question

IT Manager
Commented:
I would check the Effective Permissions with AccessEnum:
http://technet.microsoft.com/en-us/sysinternals/bb897332.aspx¨

Note:
"deny" gets priority over the "allow"

Author

Commented:
Sorry, the link you provided is bad...

Author

Commented:
Thanks, that showed me what I needed and I could remove extra users with icacls.exe. However, there are some GUID's left over for users who are gone and their account had been deleted. I tried to use icacls.exe to remove them but it would not work. Any idea on how to get rid of them?
*** Hopeleonie ***IT Manager

Commented:
Normally you can't ask more questions after your question was answered. Next time I would recommend to open an new question. But I will try to help you.

On Server or Client?

Author

Commented:
The server is 2008, patched. I can open a new question if that is protocol.
*** Hopeleonie ***IT Manager

Commented:

I can open a new question if that is protocol.

I don't find the link anymore.

However, there are some GUID's left over for users who are gone and their account had been deleted. I tried to use icacls.exe to remove them but it would not work. Any idea on how to get rid of them?

I delete the User Security ID (SID) in the Windows Registry.

More information to understand:
http://www.youtube.com/watch?v=xmGmMUCLCVY

Author

Commented:
Set me on the right path.

Explore More ContentExplore courses, solutions, and other research materials related to this topic.