[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1663
  • Last Modified:

Folder Permissions Not replicating to subfolders, files etc

We are having a strange issue with folder permissions.  Somehow we (Administrators) were locked out of creating and editing permissions on one of our Folder Shares on the Server.  Long Story short, we were able to get the Administrators group added back to the top level of the folder Shares.  Lets call this drive the G:\  I've added the Administrators Group, given "Full Controll" to "This Folder, subfolders and files"

For some reason though, "Administrators" is not propagating all the way down to lower sub directories.

For Example, if I go to the Accounting Folder under G:\Shared\ and look at the Security Tab, I can see "Administrators" has Full Control-OK good so far..   The problem is, there are about 50 folders under G:\Shared\Accounting" and some of them have "Administrators" listed with full control, some of them I cant even open or view permissions too.  

My Question is why are things NOT propagating all the way down to sub directories and is there anything I can do to force it?  I'm not sure when these problems started happening.  Administrators had Full Control at one point and I noticed this when I give a new user read/write access to a directory.  


*Users CAN NOT change file permissions.  Only the IT Department can do that.  
*The Server is Windows Server 2008 Enterprise SP2, 12GB of Ram running as a VM on our network and also acts as a print server and serves up users profiles (we have roaming profiles enabled in Active Directory) and their H: Drives as well (all users get 2GB of personal drive space mapped as the letter "H")
0
Jeffery Byers
Asked:
Jeffery Byers
  • 3
  • 3
1 Solution
 
Esteban BlancoCommented:
My apologies if I read this wrong.  Have you gone to the advanced tab and taken the inheritance out and propagate without allowing it to inherit from the parent?
0
 
Jeffery ByersAuthor Commented:
Yes, sorry, I forgot to mention that.  I did try that.  I made the change using an Administrator account and as it's applying the permissions to the folders down the list, it will eventually come to a file or folder and stop with an error.  

The Error is below.  See Screenshot1

"An error occured while applying security information to:

G:/Random_Folder/Random_Folder/etc/etc

Access Denied"

"Continue" or "Cancel" being the only 2 options.  

If I click click continue, I might get this error for 15-20 different files or and then it will start auto processing the folders on down the list.    

Basically any folder or file that it errored out on, I'm still unable to access.
SS20140715161641.jpg
0
 
Esteban BlancoCommented:
It looks like that file has explicit denies on it.  Can you take ownership of the folder in the advanced options?
0
Get free NFR key for Veeam Availability Suite 9.5

Veeam is happy to provide a free NFR license (1 year, 2 sockets) to all certified IT Pros. The license allows for the non-production use of Veeam Availability Suite v9.5 in your home lab, without any feature limitations. It works for both VMware and Hyper-V environments

 
Jeffery ByersAuthor Commented:
Thank you so much!! That did it!!  I took ownership of a few folders that were causing issues and everything seems to be fine.  Am I going to have to take ownership of each problematic folder and set the Administrator back to the owner or can I do this from a higher level and let it replicate down?
0
 
Esteban BlancoCommented:
You can take ownership at the top level and set who the owner (s) are for the folder and then let it replicate  (take ownership of G:\Random_Folder).  That will replace the owner on all folders below.  If that gives you grief, then take ownership of that folder that has the explicit deny and own it.  :)

Glad I was able to help my friend!  Don't forget to award points with an A+ grade.  HA HA!

Cheers!

Esteban
0
 
Jeffery ByersAuthor Commented:
Thanks for the quick and helpful response.  Unfortunately, I couldnt do it from the top level.  I'm having to go to each problematic folder BUT, the issue is fixed, and thats all I care about.    Even though I'm sure it was an accident, I'd love to know who removed the permissions in the first place and nearly locked us out.
0

Featured Post

Keep up with what's happening at Experts Exchange!

Sign up to receive Decoded, a new monthly digest with product updates, feature release info, continuing education opportunities, and more.

  • 3
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now