Solved

How to grant security permission on backup archive

Posted on 2015-02-15
6
66 Views
Last Modified: 2016-10-27
I have a big problem I need to figure out by tomorrow. I have to restore a user's desktop files. Should be no problem because I have a backup (Acronis). However, the user's workstation was part of a SBS 2008 domain and the actual desktop files were located on the SBS Server at \Users\RedirectedFolders\username\Desktop.

Using the Acronis 'mount image' function, I was able to mount the backup as drive I: However, when I navigate to I:\Users\RedirectedFolders, I get the error "You have been denied permission to access this folder." (see attached image, at left). I am advised to "use the security tab", but when I do, I do not have permission to Add security settings.

I assume this is a problem because the original Domain administrator and original domain user no longer exist.

How can I get access to this folder? Urgent! Help!
mountedRestoreImage.jpg
0
Comment
Question by:jmarkfoley
  • 3
  • 3
6 Comments
 
LVL 23

Expert Comment

by:NVIT
ID: 40611292
Did you try taking ownership of the folder?

Maybe before taking ownership, try adding the new admin. But, I think you already tried that.
0
 
LVL 1

Author Comment

by:jmarkfoley
ID: 40611412
NewVillageIT:
Did you try taking ownership of the folder?
Never tried that before. How? I followed these instructions:

1.Open Windows Explorer, and then locate the file or folder you want to take ownership of.

2.Right-click the file or folder, click Properties, and then click the Security tab.

3.Click Advanced, and then click the Owner tab.

However, my 'Advanced' does not have an 'Owner' tab. (see image) One wrinkle might be that this is a backup archive mounted as a drive, so it is certainly read-only.

try adding the new admin
I'll try booting as one of the listed computer admins rather than trying as the domain administrator
advanced.jpg
0
 
LVL 23

Accepted Solution

by:
NVIT earned 500 total points
ID: 40611422
Not certain why Advanced doesn't show. Maybe because its SBS. You have to do it at the source server folder. Not at the mounted drive.
0
Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

 
LVL 1

Author Comment

by:jmarkfoley
ID: 40611450
NewVillageIT:
You have to do it at the source server folder. Not at the mounted drive.
The source server no longer exists. That was supposed to be the point of backups.

I tried booting as the machine Administrator. Still no go. Odd thing is that in the Security > Advanced tab it has all the permission boxes checked including full control and take ownership, yet all the checkboxes are grayed out and I can't do anything at all. See image:
permissions.png
0
 
LVL 23

Expert Comment

by:NVIT
ID: 40613582
Hi jmark... Just wondering if you got this working... If not, try opening a CMD prompt by right-clicking and choosing Run As Administrator. In the prompt, if you can see the I: drive, try to copy something from it.
0
 
LVL 1

Author Comment

by:jmarkfoley
ID: 40618221
NewVillageIT:
try opening a CMD prompt
Didn't try that, but I would suspect the Microsoft security "gurus" would have plugged that particular hole long ago.

I was, in fact, able to shutdown all other workstations on the LAN, resurrect the old domain controller, re-add the user's workstation to the old domain controller and get to the needed files via \\domainserver\Users\RedirectedFolders\username.

[beginRant]
It's been a longstanding, forehead-slapping irritation of mine that Windows has no "Super User". Doubtless that's what makes it so easy for hackers to get to any OS files they want. No problem for hackers, big headaches for legitimate users. Unix's root user can get to any file, period, and no one can get to root-owned files unless specifically (stupidly) given permission; which is why Linux and Mac OS are so tough to hack.

Once that old domain controller is crushed into scrap metal my years of archived backups become suddenly useless -- except the Acronis software will actually let me image-restore the SBS 2008 onto completely different hardware some time in the future should I need to create a "Jurassic Park" machine from the past; a bit much of an effort if I just need the odd file or two. Again, by contrast, decades old tar backups can be read forever without having to genetically resurrect the machine that created them!
[endRant]
0

Featured Post

Get up to 2TB FREE CLOUD per backup license!

An exclusive Black Friday offer just for Expert Exchange audience! Buy any of our top-rated backup solutions & get up to 2TB free cloud per system! Perform local & cloud backup in the same step, and restore instantly—anytime, anywhere. Grab this deal now before it disappears!

Join & Write a Comment

Recently, I read that Microsoft has analysed statistics for their security intelligence report. It revealed: still, the clear majority of windows users do their daily work as administrator. An administrative account is a burden, security-wise. My ar…
Join Greg Farro and Ethan Banks from Packet Pushers (http://packetpushers.net/podcast/podcasts/pq-show-93-smart-network-monitoring-paessler-sponsored/) and Greg Ross from Paessler (https://www.paessler.com/prtg) for a discussion about smart network …
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now