User folder permissions on Server 2008

I have a user who should have full permissions on a folder and its subfolders according to AD and to the 'Effective Permissions' test you can run on a user against a folder, but he can move one or two files in the folder then gets 'permission denied by administrator. He is on Windows 7 and the Server is 2008, both are fully patched. I have run gpupdate /force on his PC. Why would his permissins keep changing?
LarryDAHAsked:
Who is Participating?
 
*** Hopeleonie ***Connect With a Mentor IT ManagerCommented:
I would check the Effective Permissions with AccessEnum:
http://technet.microsoft.com/en-us/sysinternals/bb897332.aspx¨

Note:
"deny" gets priority over the "allow"
0
 
LarryDAHAuthor Commented:
Sorry, the link you provided is bad...
0
 
*** Hopeleonie ***IT ManagerCommented:
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

 
LarryDAHAuthor Commented:
Thanks, that showed me what I needed and I could remove extra users with icacls.exe. However, there are some GUID's left over for users who are gone and their account had been deleted. I tried to use icacls.exe to remove them but it would not work. Any idea on how to get rid of them?
0
 
*** Hopeleonie ***IT ManagerCommented:
Normally you can't ask more questions after your question was answered. Next time I would recommend to open an new question. But I will try to help you.

On Server or Client?
0
 
LarryDAHAuthor Commented:
The server is 2008, patched. I can open a new question if that is protocol.
0
 
*** Hopeleonie ***IT ManagerCommented:

I can open a new question if that is protocol.

I don't find the link anymore.

However, there are some GUID's left over for users who are gone and their account had been deleted. I tried to use icacls.exe to remove them but it would not work. Any idea on how to get rid of them?

I delete the User Security ID (SID) in the Windows Registry.

More information to understand:
http://www.youtube.com/watch?v=xmGmMUCLCVY
0
 
LarryDAHAuthor Commented:
Set me on the right path.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.