Solved

Permissions not cascading to child objects - SBS 2011

Posted on 2015-01-06
8
303 Views
Last Modified: 2015-01-25
I have a problem with a small business setup. I was trying to move the RedirectedFolders folder to a drive with more space and it kept on failing with a permission issue, i accidentally took ownership of the entire directory. I Stopped sharing the folder and manualy moved it to the E drive successfully. i enabled sharing again.

I then ran the registry hack as indicated here http://technet.microsoft.com/en-us/library/gg680331.aspx and all tested ok, for some users for users they cant write to the child objects in some or all the folders.

for example,

user 1 has a folder located at e:\Redirectedfolders\user1

NTFS here is as (System FC, Domain users R,Domain Admin FC,user1 FC)

user1 ones desktop is at e:\RedirectedFolders\user1\desktop

NTFS here is as (System FC, Domain Users R, Domain Admin FC, User1 None - no check boxes checked)
the above is present for all child objects, user is in the permission list but no permissions specified for the objects

I tried to reset the permissions using icacls

icacls "c:\parentDirectory\user1" /q /c /t /reset

this seems to remove all permissions but when i try to specify some permissions it applies them but the user still has no write access to the said folders

HELP!!!
0
Comment
Question by:Helao Mwapangasha
  • 4
  • 3
8 Comments
 
LVL 24

Expert Comment

by:VB ITS
ID: 40533728
Try changing the Owner of the E:\Redirectedfolders\User1 back to either User1 or the local Administrators group on the file server.

Folder redirection doesn't seem to like it when the Owner isn't set to one of the above.
0
 
LVL 3

Author Comment

by:Helao Mwapangasha
ID: 40535107
The problem is when i do that, it applies only to the parent folder, if i check the properties of the child object, the previous permissions are still applied
0
 
LVL 24

Expert Comment

by:VB ITS
ID: 40535414
Sounds like you need to configure the permissions to propagate to the child objects. To do this:

Right click on the User1 folder in E:\RedirectedFoldersSecurity tab > Advanced > click Change Permissions in the Permissions tab > tick Replace all child object permissions with inheritable permissions from this object.
0
 
LVL 3

Author Comment

by:Helao Mwapangasha
ID: 40537305
i tried that but nothing seems to be working.
0
Want to promote your upcoming event?

Are you going to an event? Are you going to be exhibiting at a tradeshow? Talking at a conference? Using a promotional banner in your email signature ensures that your organization’s most important contacts stay in the know and can potentially spread the word about the event.

 
LVL 24

Expert Comment

by:VB ITS
ID: 40537333
When you re-enabled the sharing, did you grant the Everyone group Full Control to the share permissions?

Go to the Properties of the E:\RedirectedFolders folder > Sharing tab > Advanced SharingPermissions > make sure the Everyone group has Full Control, as by default the Everyone group only has Read access when you first enable sharing.
0
 
LVL 3

Expert Comment

by:Bahloul
ID: 40546093
Hi,

as you mentioned user1 should take full control as he the owner creator so you must assign full control first to everyone in sharing permission then  

go to security permission add user1 assign full-control .

and make sure from advanced option on Security tab to Replace all child object permissions with inheritable permissions from this object.

Bahloul.
0
 
LVL 3

Accepted Solution

by:
Helao Mwapangasha earned 0 total points
ID: 40561390
I created a new shared folder. Set the correct permissions through SBS 2011. copied the content to the folder and the permissions reapplied correctly.
0
 
LVL 3

Author Closing Comment

by:Helao Mwapangasha
ID: 40569011
I did some research on the internet and managed to find the best possible solution.
0

Featured Post

Free book by J.Peter Bruzzese, Microsoft MVP

Are you using Office 365? Trying to set up email signatures but you’re struggling with transport rules and connectors? Let renowned Microsoft MVP J.Peter Bruzzese show you how in this exclusive e-book on Office 365 email signatures. Better yet, it’s free!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

The use of stolen credentials is a hot commodity this year allowing threat actors to move laterally within the network in order to avoid breach detection.
A Bare Metal Image backup allows for the restore of an entire system to a similar or dissimilar hardware. They are highly useful for migrations and disaster recovery. Bare Metal Image backups support Full and Incremental backups. Differential backup…
As developers, we are not limited to the functions provided by the VBA language. In addition, we can call the functions that are part of the Windows operating system. These functions are part of the Windows API (Application Programming Interface). U…
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…

910 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now