Solved

How to best manage folder and file security

Posted on 2016-11-30
4
100 Views
Last Modified: 2016-11-30
I constantly struggle with deleting folders or files due to permissions.  For example I was testing our backup software and restored a backup of one folder with multiple sub-folders.   I tried to delete the restored folders and every folder except 1 deleted.  Inside the folder that didn't delete were sub-folders.  
I checked the security on the root folder and domain admins and everyone had full permissions.   I checked the box "replace all child object permissions".  When I clicked apply, I got the message "failed to enumerate objects in the container Access denied".  I checked and 3 of the sub-folders that had more sub-folders in them all had the permissions from the root folder.   The last sub-folder displayed "you must have Read permissions to view properties of this object"

This is not uncommon.  So my question is how do I change permissions all the way from the root to all sub-folders without having to do them one at a time?   Is this  Windows issue?
0
Comment
Question by:J.R. Sitman
  • 2
  • 2
4 Comments
 
LVL 24

Accepted Solution

by:
masnrock earned 500 total points
ID: 41907774
You need to verify the permissions of the subfolders in question. It could be the admin accounts were actually denied permission. For things like that, that's why you do not want to give users the ability to change the permissions on folders or files. On occasion, permissions do get corrupted, and you're forced to take ownership of the folder in order to fix things. The corruption is unfortunately not really an avoidable thing. You just have to be sure to keep good backups :)
0
 

Author Comment

by:J.R. Sitman
ID: 41907777
I seriously doubt any user changed the permissions.  Possible but not likely.  I haven't heard of permissions corruptions.   Good to know.
0
 
LVL 24

Assisted Solution

by:masnrock
masnrock earned 500 total points
ID: 41907806
That aside, you were doing things right. I'd also recommend generally trying to avoid having subfolders with different permissions and instead try to those instances as separate shares. Can become administratively annoying though.
0
 

Author Closing Comment

by:J.R. Sitman
ID: 41907960
Thanks
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Setting up a VPN 60 140
accidental deletion - ad recycle bin 3 21
Bind Mac To Azure AD 1 29
Non admin needs to install programs 17 32
While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
Worried about if Apple can protect your documents, photos, and everything else that gets stored in iCloud? Read on to find out what Apple really uses to make things secure.
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question