Taking Ownership of the top folder
Taking Ownership of the top folder
If I take ownership of the top folder (as Domain Adminstrator), would that help to trigger down new permissions assigned to a new Active Directory group ?
Assuming there are subfolders under the top folder that have been already taken ownership by other users
Thank you
If I take ownership of the top folder (as Domain Adminstrator), would that help to trigger down new permissions assigned to a new Active Directory group ?
Assuming there are subfolders under the top folder that have been already taken ownership by other users
Thank you
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
I have already taken ownership from the top folder all the way down, and it was done without error.
what I want to know when, I add a Group now and apply permissions to it at the Top folder, are those permissions will be applied to subfolders that have been created by other users , and they have taken ownership of them, and probably they also have disabled inheritance from the parent objects.
the account I am using to do this is member of Domain Admins
what I want to know when, I add a Group now and apply permissions to it at the Top folder, are those permissions will be applied to subfolders that have been created by other users , and they have taken ownership of them, and probably they also have disabled inheritance from the parent objects.
the account I am using to do this is member of Domain Admins
Its not necessary even if you have full control on top folder, you can control subfolders and files because as you said otrher users also have ownership on subfolders, in that case inheritance is getting blocked
when your users get ownership and what is that means?
when "Creator owner" group is set on acl and if user creates new folder, he becomes owner of that folder and also it will grant himself full access while removing access to other users including administrators
that is why you need to take ownership followed by full control permissions from top to bottom (recursively)
U should remove "Creator owner" group from acl recursively and then you would be able to control all aspects of folder
In the article I posted go to end of article, I have posted best practices for share folders, check if you can get that and follow that
when your users get ownership and what is that means?
when "Creator owner" group is set on acl and if user creates new folder, he becomes owner of that folder and also it will grant himself full access while removing access to other users including administrators
that is why you need to take ownership followed by full control permissions from top to bottom (recursively)
U should remove "Creator owner" group from acl recursively and then you would be able to control all aspects of folder
In the article I posted go to end of article, I have posted best practices for share folders, check if you can get that and follow that
if you already have taken ownership of all sub folders and files, you should be able to assign full control to built-in administrators group (since you are member of domain admins group and domain admins is part of built-in administrators group on member server and so you are administrator of server) and then only you can overwrite / change permissions from top to bottom.
ASKER
Mahesh
I did take Ownership
Now how should I remove "Creator Owner" ? just from the top folder?
I did take Ownership
Now how should I remove "Creator Owner" ? just from the top folder?
ASKER
Now how should I remove "Creator Owner" ? just from the top folder?
OOps.. I do not even see the Creator Owner in the top folder
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thank you Guys!
ASKER