Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

User folder permissions on Server 2008

Posted on 2012-08-14
8
Medium Priority
?
535 Views
Last Modified: 2012-08-20
I have a user who should have full permissions on a folder and its subfolders according to AD and to the 'Effective Permissions' test you can run on a user against a folder, but he can move one or two files in the folder then gets 'permission denied by administrator. He is on Windows 7 and the Server is 2008, both are fully patched. I have run gpupdate /force on his PC. Why would his permissins keep changing?
0
Comment
Question by:LarryDAH
  • 4
  • 4
8 Comments
 
LVL 19

Accepted Solution

by:
*** Hopeleonie *** earned 2000 total points
ID: 38293743
I would check the Effective Permissions with AccessEnum:
http://technet.microsoft.com/en-us/sysinternals/bb897332.aspx¨

Note:
"deny" gets priority over the "allow"
0
 

Author Comment

by:LarryDAH
ID: 38293914
Sorry, the link you provided is bad...
0
 
LVL 19

Expert Comment

by:*** Hopeleonie ***
ID: 38294003
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 

Author Comment

by:LarryDAH
ID: 38297618
Thanks, that showed me what I needed and I could remove extra users with icacls.exe. However, there are some GUID's left over for users who are gone and their account had been deleted. I tried to use icacls.exe to remove them but it would not work. Any idea on how to get rid of them?
0
 
LVL 19

Expert Comment

by:*** Hopeleonie ***
ID: 38298220
Normally you can't ask more questions after your question was answered. Next time I would recommend to open an new question. But I will try to help you.

On Server or Client?
0
 

Author Comment

by:LarryDAH
ID: 38298352
The server is 2008, patched. I can open a new question if that is protocol.
0
 
LVL 19

Expert Comment

by:*** Hopeleonie ***
ID: 38299965

I can open a new question if that is protocol.

I don't find the link anymore.

However, there are some GUID's left over for users who are gone and their account had been deleted. I tried to use icacls.exe to remove them but it would not work. Any idea on how to get rid of them?

I delete the User Security ID (SID) in the Windows Registry.

More information to understand:
http://www.youtube.com/watch?v=xmGmMUCLCVY
0
 

Author Closing Comment

by:LarryDAH
ID: 38311978
Set me on the right path.
0

Featured Post

Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A safe way to clean winsxs folder from your windows server 2008 R2 editions
Resolving an irritating Remote Desktop connection that stops your saved credentials from being used.
This Micro Tutorial will teach you how to change your appearance and customize your Windows 7 interface to your unique preference. This will be demonstrated using Windows 7 operating system.
This Micro Tutorial will give you a introduction in two parts how to utilize Windows Live Movie Maker to its maximum editing capability. This will be demonstrated using Windows Live Movie Maker on Windows 7 operating system.
Suggested Courses

810 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question