After restoring the users personal folders, write/modify is denied

We have users folders and public folders on a hard drive subsystem.  The entire set of raid 5 drives crashed (punctured stripe).  WE rebuild the drives and all is working now.  I did a restore of all the user and public shared folders and all is back complete.  Users are able to read and execute but cannot write or modify to any folders, not even their own.  I checked permissions and they have everything except full which we never give them.  I tried removing permissions and then adding back to no avail.

Any suggestions - please this is critical.
Thank you
Wayne
wlasnerDirector, ITAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

dipopoCommented:
Can you take ownership of the folder and then apply permissions?
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
wlasnerDirector, ITAuthor Commented:
did that - made no difference
0
dipopoCommented:
hmmm interesting! Is it an option to remove inheritance  for this folder, might be inheriting permissions from somewhere above in the folder structure.

I would also make sure no deny rules are in use, also worth running ICacls on the folder in question, nice to see what permissions are reported there by it.
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

wlasnerDirector, ITAuthor Commented:
not familiar with the tool, what is the correct command line to use to get the information.
thanks
0
dipopoCommented:
Type ICacls c:\folder-path from cmd with admin priv.

Also for help type ICacls /?
0
wlasnerDirector, ITAuthor Commented:
here are the results for a test folder: moyshap

U:\>icacls g:\users\moyshap
g:\users\moyshap ABLEHC\Administrator:(OI)(CI)(M)
                 BUILTIN\Administrators:(OI)(CI)(F)
                 ABLEHC\Domain Admins:(OI)(CI)(F)
                 ABLEHC\michaels:(OI)(CI)(RX)
                 ABLEHC\MoyshaP:(OI)(CI)(M)
                 NT AUTHORITY\SYSTEM:(OI)(CI)(F)

Successfully processed 1 files; Failed processing 0 files
0
dipopoCommented:
Ok the above reads as:

All have inherited permissions from parent folder.

 (OI) - object inherit
 (CI) - container inherit

Admin/Domain Admins/NT Authority have Full, michaels has read and exec, moyshaP has Modify.

 F - full access
 M - modify access
 RX - read and execute access

Looks right so final place, now that I know ntfs is not the problem, well except for michaels with read/exec, think he will need modify unless you have your reasons.

Share permissions!

What permissions do you have set for the share?
0
wlasnerDirector, ITAuthor Commented:
The user should have modify , read, write etc. just not full
0
dipopoCommented:
can you run net share sharename to get the share permissions?
0
dipopoCommented:
You may need to grant CHANGE permissions for Everyone and have MoyshaP test her NTFS rights to edit a doc?
0
wlasnerDirector, ITAuthor Commented:
can you advice on correct syntax:
G:\>net share ds1\users /grant: moyshap change

moyshap is the users folder
0
dipopoCommented:
G:\>net share ds1\users /grant:moyshap,change

this assumes

ds1\users = is the sharename "not the path"
moyshap = username as seen in ICacls with modify ntfs permissions
0
wlasnerDirector, ITAuthor Commented:
ds1 is the share name, users is the top folder for all the user folders like moyshap
0
dipopoCommented:
please use

net share ds1=c:\users [hope this is the path] /grant:moyshap,change

ideally better to grant a group. I'd give everyone change at share level and give everyone nothing at ntfs level should make sure everyone can access the share but ntfs permissions will determine final access on permissions for each user. account
0
wlasnerDirector, ITAuthor Commented:
syntax worked, thanks,
it returns "the name has already been shared"
issue is still evident.
0
dipopoCommented:
so can MoyshaP edit?
0
wlasnerDirector, ITAuthor Commented:
no change, very strange issue
0
dipopoCommented:
Have you tried having MoyshaP log-off and back on? worth a try!
0
wlasnerDirector, ITAuthor Commented:
This issue is at the top level, even if I create a new folder and give "Everyone" full access the users cannot write or modify.  even with domain admin permissions.
0
wlasnerDirector, ITAuthor Commented:
Thank you, it was a share permission on the top level for the virtual drive.
0
dipopoCommented:
Phew! was getting worried for a minute there.....knew it had to be share permissions as ntfs was alright. Well done!
0
wlasnerDirector, ITAuthor Commented:
Thanks again
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Legacy OS

From novice to tech pro — start learning today.