Link to home
Start Free TrialLog in
Avatar of syssolut
syssolutFlag for United States of America

asked on

Why can't I change permission of a file even signed in as Administrator?

I have a server that a user has multiple folders/files.  They can access all of them except one.   They created this file and saved it just before a reboot of the server.  After the reboot finished they tried accessing it and couldn't even see the file in the folder.   I went in as Administrator and can see the file.  Under Share with is just the administrator group which has Read/Write permissions.  The person who created the file is not listed.  When I try to  add them as read /write, it says I can't.  How can I get the  creator of the file to have read/write permissions and ownership the way all other files in this folder are?
Avatar of Lee W, MVP
Lee W, MVP
Flag of United States of America image

First, you should be looking at NTFS permissions to start, not SHARE permissions (though either could be playing a role).

Second, you shouldn't be assigning access rights to INDIVIDUALS; you should be assigning access rights to GROUPS and assign the individuals to groups (even groups of one, with the exception of a user's home folder).  That said, there is a special group, Creator Owner that can be applied for permissions to the creator of a file (as defined by owner information).  More info: https://activedirectoryfaq.com/2016/11/ntfs-authorization-creator-owner/

Last, EXACT errors and screen shots are helpful.  "When I try to  add them as read /write, it says I can't."  I've never seen an error state "I can't" - so what is the EXACT wording of the error?  Access denied?  what?
Are you logged in to the server or are you accessing the file over the network?

Read/Write permission isn't enough to allow you to change the permissions on the file.  If you can, log in to the server, take ownership of the file, make sure you have full control permission to the file then grant permissions to the user.
Avatar of syssolut

ASKER

Daryl Ponting.   I am remoted  into Server and signed into server as Administrator.

The creator of the file is not even listen as the "Owner" nor "Read /Write" permissions.  On this one file, no one ios listed as the owner.

Lee M, MVP, where do I look for NTFS permissions?
Right click on the file > Properties > Security > Advanced > Change Ownership.  Make yourself owner then you can change permissions on the file.  The permissions are the NTFS permissions.
Under Security there is no Change Ownership.  See attached.  Any idea how to get around this?

Lee W, MVP I can now see why in future I would use a group.
User generated image
User generated image
ASKER CERTIFIED SOLUTION
Avatar of Daryl Ponting
Daryl Ponting
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Hi,

I know this was answered already but @syssolut, this usually happens to files where users have "Full control" selected in the permission entries.  You should remove this and it won't happen again.