Can't Access folders

Hello,

I recently set Special permissions on a folder and its subfolders to Deny
Delete and Deny Delete on Folders and Subfolders. The only group listed was
Everyone. After that, I think someone else unchecked Full Control and
Modify permissions. Either that or they unchecked themselves. When I
rechecked Full Control and Modify, they showed up in the special permissions
section. Then I removed all special permissions thinking I could just start
over from scratch, but the group Everyone had disappeared and no group
listed.

Now I can't add a group and can't access the folders. How can I fix this?
The server is running Windows 2003 Small business edition if that matters.

Thank you for any help and God Bless,

Mark A. Sam

 

I got thsi resolved.

 

I got permissions set on the main folder, but a couple of the subfolders are
denying me permission, even as Administrator, and some of the files are
being denied in the folders that I can access.

I know little about this stuff, but it seems bizarre. It also seems
irrational that the Administrator can be denied permission, yet if a new
user is added, he has permission to delete folders and can wipe out valuable
information. Am I wrong in thinking that an Admin should have all rights,
and a new user no rights until they are granted?

God Bless,

Mark A. Sam

 

It is less bizarre than it seems.
The Creator Owner can only delete stuff they create or own.
As administrator you can over-rule by taking ownership and then setting the
permissions.
Anthony,
http://www.airdesk.com

 

Anthony,

I was logged in as Administrator. I did take ownership to get the ability
to add users back onto the list and set permissions. The userlist now
includes the Administrator and Everyone. All permissions are issued
including full control. Some subfolders are accessible, some aren't. Some
files are accessible and some aren't. No files (.pdf) will open. This is
what is bizarre.

I have deleted files and folders that others have created. I am an
administrator and should expect to. But this problem doesn't seem to be
subject to any rules or rationale.

Thank you for your response and God Bless,

Mark A. Sam

 

I'm not sure I understand the problem, but did you also check the box to
reset permission on child objects?
What exact error are you getting?
Anthony
http://www.airdesk.com

 

Anthony,

The message is, T:\<MainFolder>\<Subfolder><Subfolder> is not accessible.

Access is denied.

 

There is a folder (with its subfolders) that I can access now, but I can't
open the files. I get this message.

There was an error opening this document. Access denied.

I just discovered that I can open a document if I give the Administrator
ownership, close the properties box open it again, then give Everyone
permissions, then I can open the file. But there are over 18,000 files
under the main folder so it isn't practical.

Different subfolders have different property settings. I can't explain it.
I can jump around and find that some folders are accessible as well as some
files. Some permissions are editible and some aren't. One folder has all of
its properties check, but some were disabled. When I clicked on the
enabled checkboxes they became disabled but still checked.

It doesn't make sense but it is what I am dealing with.

Thanks for your help and God Bless,

Mark

 

I've got it resolved. I discovered that I can select all the files in a
folder and change their permissions together, so that's what I'm going to
do, and pray that a disgruntled employee doesn't decide to wipe out the
whole disk drive.

 

Mark,
The two things you need to do are:
- reset ownership (as you have been doing) and check the box to Reset
ownership on subcontainers;
- reset permissions, checking the box to reset permissions on child objects.
Obviously you need to be extremely careful not to lose track of the
permissions that are supposed to be there. If you can find out what happened
you have a chance to reverse it if you are careful. You need to reset at
whatever level in the folder tree the problem occured,
Hope that helps,
Anthony
http://www.airdesk.co.uk

 

Thank you Anthony,

Checking the subcontainer checkbox fix it. I was working backwards, folder
by folder. It would have taken me over a day to complete it all.

God Bless,

Mark

 

Anthony,

I added a Security Group to the main folder which includes as its members,
the Users that I don't want to be able to delete files. I set special
permission denying Delete and Delete Folders and Files. I placed test files
in one of the subfolders, logged in as one of the Users and was able to
delete test files. If like you say, a user can't delete other's files,
there must be some setting somewhere which allows anyone to delete anything.
Is that possible?

God Bless,

Mark

 

Mark,
There's a few things to bear in mind:
- Use Modify permissions instead of Full Control. This prevents a user from
taking ownership and/or changing the permissions. Only administrators need
to be able to change permissions
- The Creator Owner has special rights.
- Deny has some unexpected consequences, and so does not having Delete
permissions, so Deny Delete might give you unexpected results, assuming the
permissions was actually applied.
- An explicit Allow has precedence over an inherited Deny. It is really
better not to give permissions than to start setting Deny's.
- Not having Delete permissions will prevent simple things like renaming or
saving, for example: http://support.microsoft.com/kb/277867
Hope that helps,
Anthony
http://www.airdesk.com

 

Anthony,

Thanks again for your response. I understand what you are saying, but it
doesn't jive with this system. The client has a network consultant. I'll
let him figure it out. If he can't maybe I'll get the the client to try out
your service.

God Bless,

Mark