Solved

Permissions not cascading to child objects - SBS 2011

Posted on 2015-01-06
8
339 Views
Last Modified: 2015-01-25
I have a problem with a small business setup. I was trying to move the RedirectedFolders folder to a drive with more space and it kept on failing with a permission issue, i accidentally took ownership of the entire directory. I Stopped sharing the folder and manualy moved it to the E drive successfully. i enabled sharing again.

I then ran the registry hack as indicated here http://technet.microsoft.com/en-us/library/gg680331.aspx and all tested ok, for some users for users they cant write to the child objects in some or all the folders.

for example,

user 1 has a folder located at e:\Redirectedfolders\user1

NTFS here is as (System FC, Domain users R,Domain Admin FC,user1 FC)

user1 ones desktop is at e:\RedirectedFolders\user1\desktop

NTFS here is as (System FC, Domain Users R, Domain Admin FC, User1 None - no check boxes checked)
the above is present for all child objects, user is in the permission list but no permissions specified for the objects

I tried to reset the permissions using icacls

icacls "c:\parentDirectory\user1" /q /c /t /reset

this seems to remove all permissions but when i try to specify some permissions it applies them but the user still has no write access to the said folders

HELP!!!
0
Comment
Question by:Helao Mwapangasha
  • 4
  • 3
8 Comments
 
LVL 24

Expert Comment

by:VB ITS
ID: 40533728
Try changing the Owner of the E:\Redirectedfolders\User1 back to either User1 or the local Administrators group on the file server.

Folder redirection doesn't seem to like it when the Owner isn't set to one of the above.
0
 
LVL 3

Author Comment

by:Helao Mwapangasha
ID: 40535107
The problem is when i do that, it applies only to the parent folder, if i check the properties of the child object, the previous permissions are still applied
0
 
LVL 24

Expert Comment

by:VB ITS
ID: 40535414
Sounds like you need to configure the permissions to propagate to the child objects. To do this:

Right click on the User1 folder in E:\RedirectedFoldersSecurity tab > Advanced > click Change Permissions in the Permissions tab > tick Replace all child object permissions with inheritable permissions from this object.
0
Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

 
LVL 3

Author Comment

by:Helao Mwapangasha
ID: 40537305
i tried that but nothing seems to be working.
0
 
LVL 24

Expert Comment

by:VB ITS
ID: 40537333
When you re-enabled the sharing, did you grant the Everyone group Full Control to the share permissions?

Go to the Properties of the E:\RedirectedFolders folder > Sharing tab > Advanced SharingPermissions > make sure the Everyone group has Full Control, as by default the Everyone group only has Read access when you first enable sharing.
0
 
LVL 3

Expert Comment

by:Bahloul
ID: 40546093
Hi,

as you mentioned user1 should take full control as he the owner creator so you must assign full control first to everyone in sharing permission then  

go to security permission add user1 assign full-control .

and make sure from advanced option on Security tab to Replace all child object permissions with inheritable permissions from this object.

Bahloul.
0
 
LVL 3

Accepted Solution

by:
Helao Mwapangasha earned 0 total points
ID: 40561390
I created a new shared folder. Set the correct permissions through SBS 2011. copied the content to the folder and the permissions reapplied correctly.
0
 
LVL 3

Author Closing Comment

by:Helao Mwapangasha
ID: 40569011
I did some research on the internet and managed to find the best possible solution.
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

SHARE your personal details only on a NEED to basis. Take CHARGE and SECURE your IDENTITY. How do I then PROTECT myself and stay in charge of my own Personal details (and) - MY own WAY...
In this article, I will show you HOW TO: Install VMware Tools for Windows on a VMware Windows virtual machine on a VMware vSphere Hypervisor 6.5 (ESXi 6.5) Host Server, using the VMware Host Client. The virtual machine has Windows Server 2016 instal…
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

807 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question