Solved

Windows Server 2003 SP2 Can't assign folder permissions

Posted on 2014-11-03
9
103 Views
Last Modified: 2014-11-07
I needed to add a user to the permissions on a folder. It appears to have been successful as the effective permissions displays correctly. However the user can't access that particular folder or it's sub-folders.

The user previously had permissions to that exact folder, but went on leave and other (temporary) user was using her PC, hence I had to revoke the rights and now need to re-invoke.
0
Comment
Question by:GPXSupport
  • 5
  • 4
9 Comments
 
LVL 6

Expert Comment

by:Asif Bacchus
Comment Utility
Has the user logged-off and then back on since the permissions were changed?  Also, are the permissions applied directly to the folder in question or are they being inherited from a parent folder?
0
 

Author Comment

by:GPXSupport
Comment Utility
Rebooted the PC many times.
They were being inherited from the parent, but I have broken that link.
0
 
LVL 6

Expert Comment

by:Asif Bacchus
Comment Utility
Interesting and frustrating!  Does this happen if you create/assign a different user or does it appear to be limited to this one user?
0
 

Author Comment

by:GPXSupport
Comment Utility
Ok, I have added another user to that folder permission, one that has never had access to it before and it works.

So appears to be a "feature" of that user ...
0
How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

 
LVL 6

Expert Comment

by:Asif Bacchus
Comment Utility
When you apply the permissions to the existing user, have you tried applying them via the advanced permissions dialog and then selecting the "Replace all child object permissions with inheritable permissions from this object" to force a reset of permissions?
0
 

Author Comment

by:GPXSupport
Comment Utility
Yes, multiple times.
0
 
LVL 6

Accepted Solution

by:
Asif Bacchus earned 500 total points
Comment Utility
There are only three things I can think of at this point (in order of ease of application):

1)   Are you absolutely sure there are no 'deny' permissions overriding 'allow' permissions for the user in question?  Are you certain the user is not a member of a group that has any deny permissions set on the resource share in question?
2)   Try resetting the user's password via active directory and see if that helps
3)   Backup any files for that user, delete the user completely from AD, create a new user, transfer backed up files

The 3rd option will work for sure, but doesn't really give you an indication of why this is happening in the first place.  It should not be happening at all, obviously, and you've taken the proper steps to troubleshoot.
0
 

Author Comment

by:GPXSupport
Comment Utility
Thanks, 2 was the clue. I had forgotten to amend the login script after the user returned from leave so she was effectively logging on as someone else (who of course didn't have rights). Thanks for your help and apologies for the stupidity. :)
0
 
LVL 6

Expert Comment

by:Asif Bacchus
Comment Utility
No problem, we all have those moments ;-)  Glad you got it sorted out.
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

I guess it is not common knowledge to most Wintel engineers/administrators: If you have an SNMP-based monitoring system in your environment (and it's common to have SNMP or Syslog) it's reasonably easy to enable monitoring of the Windows Event logs,…
Recently, I had the need to build a standalone system to run a point-of-sale system. I’m running this on a low-voltage Atom processor, so I wanted a light-weight operating system, but still needed Windows. I chose to use Microsoft Windows Server 200…
Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…
This video demonstrates how to create an example email signature rule for a department in a company using CodeTwo Exchange Rules. The signature will be inserted beneath users' latest emails in conversations and will be displayed in users' Sent Items…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now