[Last Call] Learn how to a build a cloud-first strategyRegister Now


Users unable to Save or Save-As on Network Shares - random issue- Storage Server 2008 R2 SP1

Posted on 2012-08-19
Medium Priority
Last Modified: 2012-09-26
Dear Experts,

Our 2003 R2 server crashed and we transferred all of the Shares onto the new HP StorageWorks X1600 G2 NAS with Stoarge Server 2008 R2 SP1 OS.
Domain functional level is currently 2003, will be upgrading to 2008 soon.
Our shares were recreated on the D: Partition of the NAS and users connect to these shares through mapped network drives \\NAS\Share
What started happening immediately since the migration is that User couldn't save any files on the network drives. We corrected the issue by checking the "Delete" check-box under NTFS permissions. That corrected the issue or so we thought....
Now, a slightly different issue is happening randomly where users can not Save or Save-As the files on the network drives. As I mentioned the issue is very random, happens to one person today and to another person tomorrow. I`ve advised my users to try Save-As, that doesn't always work. So now when issue is encountered, users save file to the desktop then copy/paste to the network drive. I`ve also noticed that sometimes when users attempt to save a file, a temp file is generated and an additional empty 0Kb office doc is created. This is not only happening to Office applications, also happens with Adobe InDesign, Photoshop etc.
I thought that it could be Symantec AV related issue, so we installed SEP client on the NAS, we also adjusted the policy to trust other machines that run Antivirus. Disabled scan of network drives but to no avail...
We then rebuilt the share permissions.

Properties of the Share --> Sharing tab --> Advanced Sharing --> Permissions:
Security Group - Change & Read
Domain Admins & Local Administrator - Full Control

Properties of the Share --> Security Tab
System, Local Admin, Domain Admins - Full Control
Security Group - Modify, Read, Write, R&E, List Folders

Properties of the Share --> Security Tab --> Advanced Tab --> selected Security Group --> Change Permissions --> Selected Security Group --> Edit
Everything is checked except for: Full Control,  Change Permissions & Take Ownership

Owner on the Share is Local Administrator

Another thing that I`ve noticed is that when the user creates a new file, that user is automatically set as the Creator Owner. I don't remember if this was also the behavior on the 2003 boxes...

We contacted Microsoft, they bored us with running the net mon captures for almost two weeks and without any results. So one day we run the capture on the client and the NAS and MS can't find anything wrong and have been asking me to rerun the captures.
We also disabled the Offline Caching on the couple of client machines, but it didn't help.
At this point I'm at a loss as Microsoft's latest suggestion was to go inside the NTFS permissions and set the Security Group with permissions to change permissions....
I don't want my users to change permissions period..
Any suggestions ? Forgot to mention, majority of client machiens are WIN7 Pro. We have a few XP boxes, but XP users didn't report this issue.
Question by:zanderkid
  • 4
  • 2

Author Comment

ID: 38310189
i should also add that when this issue occurs, user has to End Task the process as it just gets stuck on Saving. If user attempts to restart the PC, it will stay on "Logging Off" forever without ever restarting. Users then forced to force shut down the PC.

Assisted Solution

R3C0N earned 1336 total points
ID: 38310466
After your applying permissions in the sharing tab dialog boxes are you highlighting the security groups and clicking apply. And have you installed the file server role in Server Mannager here's a link



Author Comment

ID: 38310488
Hello R3c0n,

the answer to both is Yes.
I beleive Storage Sever 2008 R2 - HP x1600 G2 actually comes witf the file server role already installed. Don't remember if I had to installl it manually or not, but it is installed.
I did hit apply every time though.
My next step would be to rename existing share and move data to a newly created share as well as turning off indexing.
I did miss that I also disabled opportunistic locking on the server since PCs would lockup on shutdown or restart. Now disabling the "short file name creation"
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.


Author Comment

ID: 38310490
Also, NFS service is disabled. One of the HP guys suggested disabling the SMB 2.0, although I'm not sure this will help since all affected clients run WIN7....
LVL 11

Assisted Solution

hecgomrec earned 664 total points
ID: 38312415
On the the server with the folder/unit/volumen you need to share you should have

Properties of the Share --> Sharing tab --> Permissions:
Everyone Group - Change & Read
"Domain Users" - Change & Read

Properties of the Share --> Security Tab
Users Group - Modify, R&E, List Folders, Read, Write (your selected Group)

Allow inheritable permissions were needed and remove were not needed.

Also in the advanced tab, go to effective permissions and select one of the users with the problem and check efective rights for a specific file or folder inside the share.  Remember rights can conflict with user's rights on another group.  Sometimes you need to do a spot check to see if everything is working as desired.

Hope this help, please let me know

Accepted Solution

R3C0N earned 1336 total points
ID: 38314517

I know you were clicking apply what I was emphasizing is highlighting any and all newly added Security Groups in the dialog boxes then clicking apply. Do you see the dialog box coming up that shows the files looking like they are copying. Or prompts you if your sure you want to break inheritance. If you highlight the groups in the box I always saw the additional prompts.  And was curious as to your reports your generating from file sever resource manager you should be track changes easily as your trying to move forward. I always created an Security Group All Read and then nested my read and rw security groups within. Create the new folder and remove everything but system and administrator add the SG All read group highlight that and system and administrator and click apply after create a on your subfolders in the parent you can start to apply your rw groups per folder and it will come together. It just sounds like a few too many moving parts for something that I'm sure you've done before. As a suggestion this could become troublesome later without knowing the root of the cause now hence the reason for suggesting just trying a basic scenario.

Author Closing Comment

ID: 38438396
Hey guys,

I apologize for delayed response. Issue was actually not related to the Permissions. It came down to Disabling all netflow on the offending machines within the NIC properties as well as running the following:

After following the above, the issue appears to have disappeared.
Thank you again for all of your help.

Featured Post

NEW Veeam Agent for Microsoft Windows

Backup and recover physical and cloud-based servers and workstations, as well as endpoint devices that belong to remote users. Avoid downtime and data loss quickly and easily for Windows-based physical or public cloud-based workloads!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Background Information Recently I have fixed file server permission issues for one of my client. The client has 1800 users and one Windows Server 2008 R2 domain joined file server with 12 TB of data, 250+ shared folders and the folder structure i…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…
Suggested Courses

834 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question