Folder Permissions Not replicating to subfolders, files etc

Posted on 2014-07-15
Last Modified: 2014-07-15
We are having a strange issue with folder permissions.  Somehow we (Administrators) were locked out of creating and editing permissions on one of our Folder Shares on the Server.  Long Story short, we were able to get the Administrators group added back to the top level of the folder Shares.  Lets call this drive the G:\  I've added the Administrators Group, given "Full Controll" to "This Folder, subfolders and files"

For some reason though, "Administrators" is not propagating all the way down to lower sub directories.

For Example, if I go to the Accounting Folder under G:\Shared\ and look at the Security Tab, I can see "Administrators" has Full Control-OK good so far..   The problem is, there are about 50 folders under G:\Shared\Accounting" and some of them have "Administrators" listed with full control, some of them I cant even open or view permissions too.  

My Question is why are things NOT propagating all the way down to sub directories and is there anything I can do to force it?  I'm not sure when these problems started happening.  Administrators had Full Control at one point and I noticed this when I give a new user read/write access to a directory.  

*Users CAN NOT change file permissions.  Only the IT Department can do that.  
*The Server is Windows Server 2008 Enterprise SP2, 12GB of Ram running as a VM on our network and also acts as a print server and serves up users profiles (we have roaming profiles enabled in Active Directory) and their H: Drives as well (all users get 2GB of personal drive space mapped as the letter "H")
Question by:Jeffery Byers
    LVL 8

    Expert Comment

    by:Esteban Blanco
    My apologies if I read this wrong.  Have you gone to the advanced tab and taken the inheritance out and propagate without allowing it to inherit from the parent?

    Author Comment

    by:Jeffery Byers
    Yes, sorry, I forgot to mention that.  I did try that.  I made the change using an Administrator account and as it's applying the permissions to the folders down the list, it will eventually come to a file or folder and stop with an error.  

    The Error is below.  See Screenshot1

    "An error occured while applying security information to:


    Access Denied"

    "Continue" or "Cancel" being the only 2 options.  

    If I click click continue, I might get this error for 15-20 different files or and then it will start auto processing the folders on down the list.    

    Basically any folder or file that it errored out on, I'm still unable to access.
    LVL 8

    Accepted Solution

    It looks like that file has explicit denies on it.  Can you take ownership of the folder in the advanced options?

    Author Comment

    by:Jeffery Byers
    Thank you so much!! That did it!!  I took ownership of a few folders that were causing issues and everything seems to be fine.  Am I going to have to take ownership of each problematic folder and set the Administrator back to the owner or can I do this from a higher level and let it replicate down?
    LVL 8

    Expert Comment

    by:Esteban Blanco
    You can take ownership at the top level and set who the owner (s) are for the folder and then let it replicate  (take ownership of G:\Random_Folder).  That will replace the owner on all folders below.  If that gives you grief, then take ownership of that folder that has the explicit deny and own it.  :)

    Glad I was able to help my friend!  Don't forget to award points with an A+ grade.  HA HA!



    Author Closing Comment

    by:Jeffery Byers
    Thanks for the quick and helpful response.  Unfortunately, I couldnt do it from the top level.  I'm having to go to each problematic folder BUT, the issue is fixed, and thats all I care about.    Even though I'm sure it was an accident, I'd love to know who removed the permissions in the first place and nearly locked us out.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Do You Know the 4 Main Threat Actor Types?

    Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

    I was supporting a handful of Windows 2008 (non-R2) 2 node clusters with shared quorum disks. Some had SQL 2008 installed and some were just a vendor application that we supported. For the purposes of this article it doesn’t really matter which so w…
    You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
    This tutorial will walk an individual through locating and launching the BEUtility application and how to execute it on the appropriate database. Log onto the server running the Backup Exec database. In a larger environment, this would generally be …
    This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…

    760 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    8 Experts available now in Live!

    Get 1:1 Help Now