Taking Ownership of the top folder

Taking Ownership of the top folder

If I take ownership of the top folder (as Domain Adminstrator), would that help to trigger down new permissions assigned to a new Active Directory group ?
Assuming there are subfolders under the top folder that have been already taken ownership by other users

Thank you
jskfanAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

IvanSystem EngineerCommented:
Hi,

when you add/ remove permissions to a folder, usually user need to sign out of computer, log back in and his/hers account would receive new permissions. They can access required folder after.

If you take ownership, I don't think anything would happened, except you become owner of folder.

Regards,
Ivan.
0
MaheshArchitectCommented:
use Subinacl or SetACL to take ownership and grant administrators group full control on top folder and all sub folders and files recursively
Because only taking ownership won't allow you to grant new permissions, you also need full control on top folder so that you can assign other users and groups required permissions
ownership will make you possible to grant yourself full access
use below article to set ownership followed by full control permissions
https://www.experts-exchange.com/articles/17526/Windows-File-Server-Folder-ownership-problems-and-resolution.html
0
jskfanAuthor Commented:
Yes I have Full Control on the Top Folder. What I am trying to understand,whether when I add a new group to the top folder and assign permissions will these permissions trickle down to Subfolder and files, even if there  are subfolders that have been taken ownership by other Users.
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

jskfanAuthor Commented:
I have already taken ownership from the top folder all the way down, and it was done without error.
what  I want to know when, I add a Group now and apply permissions to it at the Top folder, are those permissions will be applied to subfolders that have been created by other users , and they have taken ownership of them, and probably they also have disabled inheritance from the parent objects.
the account I am using  to do this is member of Domain Admins
0
MaheshArchitectCommented:
Its not necessary even if you have full control on top folder, you can control subfolders and files because as you said otrher users also have ownership on subfolders, in that case inheritance is getting blocked
when your users get ownership and what is that means?

when "Creator owner" group is set on acl and if user creates new folder, he becomes owner of that folder and also it will grant himself full access while removing access to other users including administrators
that is why you need to take ownership followed by full control permissions from top to bottom (recursively)

U should remove "Creator owner" group from acl recursively and then you would be able to control all aspects of folder
In the article I posted go to end of article, I have posted best practices for share folders, check if you can get that and follow that
0
MaheshArchitectCommented:
if you already have taken ownership of all sub folders and files, you should be able to assign full control to built-in administrators group (since you are member of domain admins group and domain admins is part of built-in administrators group on member server and so you are administrator of server) and then only you can overwrite / change permissions from top to bottom.
0
jskfanAuthor Commented:
Mahesh

I did take Ownership

Now how should I remove "Creator Owner" ? just from the top folder?
0
jskfanAuthor Commented:
Now how should I remove "Creator Owner" ? just from the top folder?

OOps.. I do not even see the Creator Owner in the top folder
0
MaheshArchitectCommented:
yes, that right

U must already have removed "Creator owner" group from top, may be you have disabled inheritance on top folder and during that action creator owner might have removed

Now only catch is, it might not be removed from all folders as it is been propagated before you taken ownership and granting yourself full control
U can remove "Creator owner" group with Subinacl from all sub folders and file underneath top folder. if it exists anywhere it should get removed

Ex:
subinacl /subdirectories c:\topfolder /revoke="Creator Owner"   - remove creator owner from root folder
subinacl /subdirectories c:\topfolder\ /revoke="Creator Owner"  - from sub folders and files underneath top folder
https://www.petri.com/subinacl-setting-permissions
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
jskfanAuthor Commented:
Thank you Guys!
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.