Folder Permissions Not replicating to subfolders, files etc
We are having a strange issue with folder permissions. Somehow we (Administrators) were locked out of creating and editing permissions on one of our Folder Shares on the Server. Long Story short, we were able to get the Administrators group added back to the top level of the folder Shares. Lets call this drive the G:\ I've added the Administrators Group, given "Full Controll" to "This Folder, subfolders and files"
For some reason though, "Administrators" is not propagating all the way down to lower sub directories.
For Example, if I go to the Accounting Folder under G:\Shared\ and look at the Security Tab, I can see "Administrators" has Full Control-OK good so far.. The problem is, there are about 50 folders under G:\Shared\Accounting" and some of them have "Administrators" listed with full control, some of them I cant even open or view permissions too.
My Question is why are things NOT propagating all the way down to sub directories and is there anything I can do to force it? I'm not sure when these problems started happening. Administrators had Full Control at one point and I noticed this when I give a new user read/write access to a directory.
*Users CAN NOT change file permissions. Only the IT Department can do that.
*The Server is Windows Server 2008 Enterprise SP2, 12GB of Ram running as a VM on our network and also acts as a print server and serves up users profiles (we have roaming profiles enabled in Active Directory) and their H: Drives as well (all users get 2GB of personal drive space mapped as the letter "H")
For some reason though, "Administrators" is not propagating all the way down to lower sub directories.
For Example, if I go to the Accounting Folder under G:\Shared\ and look at the Security Tab, I can see "Administrators" has Full Control-OK good so far.. The problem is, there are about 50 folders under G:\Shared\Accounting" and some of them have "Administrators" listed with full control, some of them I cant even open or view permissions too.
My Question is why are things NOT propagating all the way down to sub directories and is there anything I can do to force it? I'm not sure when these problems started happening. Administrators had Full Control at one point and I noticed this when I give a new user read/write access to a directory.
*Users CAN NOT change file permissions. Only the IT Department can do that.
*The Server is Windows Server 2008 Enterprise SP2, 12GB of Ram running as a VM on our network and also acts as a print server and serves up users profiles (we have roaming profiles enabled in Active Directory) and their H: Drives as well (all users get 2GB of personal drive space mapped as the letter "H")
Esteban Blanco
My apologies if I read this wrong. Have you gone to the advanced tab and taken the inheritance out and propagate without allowing it to inherit from the parent?
ASKER
Yes, sorry, I forgot to mention that. I did try that. I made the change using an Administrator account and as it's applying the permissions to the folders down the list, it will eventually come to a file or folder and stop with an error.
The Error is below. See Screenshot1
"An error occured while applying security information to:
G:/Random_Folder/Random_Fo
Access Denied"
"Continue" or "Cancel" being the only 2 options.
If I click click continue, I might get this error for 15-20 different files or and then it will start auto processing the folders on down the list.
Basically any folder or file that it errored out on, I'm still unable to access.
SS20140715161641.jpg
The Error is below. See Screenshot1
"An error occured while applying security information to:
G:/Random_Folder/Random_Fo
Access Denied"
"Continue" or "Cancel" being the only 2 options.
If I click click continue, I might get this error for 15-20 different files or and then it will start auto processing the folders on down the list.
Basically any folder or file that it errored out on, I'm still unable to access.
SS20140715161641.jpg
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thank you so much!! That did it!! I took ownership of a few folders that were causing issues and everything seems to be fine. Am I going to have to take ownership of each problematic folder and set the Administrator back to the owner or can I do this from a higher level and let it replicate down?
You can take ownership at the top level and set who the owner (s) are for the folder and then let it replicate (take ownership of G:\Random_Folder). That will replace the owner on all folders below. If that gives you grief, then take ownership of that folder that has the explicit deny and own it. :)
Glad I was able to help my friend! Don't forget to award points with an A+ grade. HA HA!
Cheers!
Esteban
Glad I was able to help my friend! Don't forget to award points with an A+ grade. HA HA!
Cheers!
Esteban
ASKER
Thanks for the quick and helpful response. Unfortunately, I couldnt do it from the top level. I'm having to go to each problematic folder BUT, the issue is fixed, and thats all I care about. Even though I'm sure it was an accident, I'd love to know who removed the permissions in the first place and nearly locked us out.