Folder Permissions Not replicating to subfolders, files etc

We are having a strange issue with folder permissions.  Somehow we (Administrators) were locked out of creating and editing permissions on one of our Folder Shares on the Server.  Long Story short, we were able to get the Administrators group added back to the top level of the folder Shares.  Lets call this drive the G:\  I've added the Administrators Group, given "Full Controll" to "This Folder, subfolders and files"

For some reason though, "Administrators" is not propagating all the way down to lower sub directories.

For Example, if I go to the Accounting Folder under G:\Shared\ and look at the Security Tab, I can see "Administrators" has Full Control-OK good so far..   The problem is, there are about 50 folders under G:\Shared\Accounting" and some of them have "Administrators" listed with full control, some of them I cant even open or view permissions too.  

My Question is why are things NOT propagating all the way down to sub directories and is there anything I can do to force it?  I'm not sure when these problems started happening.  Administrators had Full Control at one point and I noticed this when I give a new user read/write access to a directory.  


*Users CAN NOT change file permissions.  Only the IT Department can do that.  
*The Server is Windows Server 2008 Enterprise SP2, 12GB of Ram running as a VM on our network and also acts as a print server and serves up users profiles (we have roaming profiles enabled in Active Directory) and their H: Drives as well (all users get 2GB of personal drive space mapped as the letter "H")
Jeffery ByersNetwork AdministratorAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Esteban BlancoPresidentCommented:
My apologies if I read this wrong.  Have you gone to the advanced tab and taken the inheritance out and propagate without allowing it to inherit from the parent?
0
Jeffery ByersNetwork AdministratorAuthor Commented:
Yes, sorry, I forgot to mention that.  I did try that.  I made the change using an Administrator account and as it's applying the permissions to the folders down the list, it will eventually come to a file or folder and stop with an error.  

The Error is below.  See Screenshot1

"An error occured while applying security information to:

G:/Random_Folder/Random_Folder/etc/etc

Access Denied"

"Continue" or "Cancel" being the only 2 options.  

If I click click continue, I might get this error for 15-20 different files or and then it will start auto processing the folders on down the list.    

Basically any folder or file that it errored out on, I'm still unable to access.
SS20140715161641.jpg
0
Esteban BlancoPresidentCommented:
It looks like that file has explicit denies on it.  Can you take ownership of the folder in the advanced options?
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

Jeffery ByersNetwork AdministratorAuthor Commented:
Thank you so much!! That did it!!  I took ownership of a few folders that were causing issues and everything seems to be fine.  Am I going to have to take ownership of each problematic folder and set the Administrator back to the owner or can I do this from a higher level and let it replicate down?
0
Esteban BlancoPresidentCommented:
You can take ownership at the top level and set who the owner (s) are for the folder and then let it replicate  (take ownership of G:\Random_Folder).  That will replace the owner on all folders below.  If that gives you grief, then take ownership of that folder that has the explicit deny and own it.  :)

Glad I was able to help my friend!  Don't forget to award points with an A+ grade.  HA HA!

Cheers!

Esteban
0
Jeffery ByersNetwork AdministratorAuthor Commented:
Thanks for the quick and helpful response.  Unfortunately, I couldnt do it from the top level.  I'm having to go to each problematic folder BUT, the issue is fixed, and thats all I care about.    Even though I'm sure it was an accident, I'd love to know who removed the permissions in the first place and nearly locked us out.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.