Solved

How to best manage folder and file security

Posted on 2016-11-30
4
56 Views
Last Modified: 2016-11-30
I constantly struggle with deleting folders or files due to permissions.  For example I was testing our backup software and restored a backup of one folder with multiple sub-folders.   I tried to delete the restored folders and every folder except 1 deleted.  Inside the folder that didn't delete were sub-folders.  
I checked the security on the root folder and domain admins and everyone had full permissions.   I checked the box "replace all child object permissions".  When I clicked apply, I got the message "failed to enumerate objects in the container Access denied".  I checked and 3 of the sub-folders that had more sub-folders in them all had the permissions from the root folder.   The last sub-folder displayed "you must have Read permissions to view properties of this object"

This is not uncommon.  So my question is how do I change permissions all the way from the root to all sub-folders without having to do them one at a time?   Is this  Windows issue?
0
Comment
Question by:jrsitman
  • 2
  • 2
4 Comments
 
LVL 20

Accepted Solution

by:
masnrock earned 500 total points
ID: 41907774
You need to verify the permissions of the subfolders in question. It could be the admin accounts were actually denied permission. For things like that, that's why you do not want to give users the ability to change the permissions on folders or files. On occasion, permissions do get corrupted, and you're forced to take ownership of the folder in order to fix things. The corruption is unfortunately not really an avoidable thing. You just have to be sure to keep good backups :)
0
 

Author Comment

by:jrsitman
ID: 41907777
I seriously doubt any user changed the permissions.  Possible but not likely.  I haven't heard of permissions corruptions.   Good to know.
0
 
LVL 20

Assisted Solution

by:masnrock
masnrock earned 500 total points
ID: 41907806
That aside, you were doing things right. I'd also recommend generally trying to avoid having subfolders with different permissions and instead try to those instances as separate shares. Can become administratively annoying though.
0
 

Author Closing Comment

by:jrsitman
ID: 41907960
Thanks
0

Join & Write a Comment

Article by: btan
Provide an easy one stop to quickly get the relevant information on common asked question on Ransomware in Expert Exchange.
If you're not part of the solution, you're part of the problem.   Tips on how to secure IoT devices, even the dumbest ones, so they can't be used as part of a DDoS botnet.  Use PRTG Network Monitor as one of the building blocks, to detect unusual…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now