Can't Access folders

Discussion in 'Server Networking' started by Mark A. Sam, Jan 28, 2008.

  1. Mark A. Sam

    Mark A. Sam Guest

    Hello,

    I recently set Special permissions on a folder and its subfolders to Deny
    Delete and Deny Delete on Folders and Subfolders. The only group listed was
    Everyone. After that, I think someone else unchecked Full Control and
    Modify permissions. Either that or they unchecked themselves. When I
    rechecked Full Control and Modify, they showed up in the special permissions
    section. Then I removed all special permissions thinking I could just start
    over from scratch, but the group Everyone had disappeared and no group
    listed.

    Now I can't add a group and can't access the folders. How can I fix this?
    The server is running Windows 2003 Small business edition if that matters.

    Thank you for any help and God Bless,

    Mark A. Sam
     
    Mark A. Sam, Jan 28, 2008
    #1
    1. Advertisements

  2. Mark A. Sam

    Mark A. Sam Guest

    I got thsi resolved.
     
    Mark A. Sam, Jan 28, 2008
    #2
    1. Advertisements

  3. Mark A. Sam

    Mark A. Sam Guest

    I got permissions set on the main folder, but a couple of the subfolders are
    denying me permission, even as Administrator, and some of the files are
    being denied in the folders that I can access.

    I know little about this stuff, but it seems bizarre. It also seems
    irrational that the Administrator can be denied permission, yet if a new
    user is added, he has permission to delete folders and can wipe out valuable
    information. Am I wrong in thinking that an Admin should have all rights,
    and a new user no rights until they are granted?

    God Bless,

    Mark A. Sam
     
    Mark A. Sam, Jan 28, 2008
    #3
  4. It is less bizarre than it seems.
    The Creator Owner can only delete stuff they create or own.
    As administrator you can over-rule by taking ownership and then setting the
    permissions.
    Anthony,
    http://www.airdesk.com
     
    Anthony [MVP], Jan 28, 2008
    #4
  5. Mark A. Sam

    Mark A. Sam Guest

    Anthony,

    I was logged in as Administrator. I did take ownership to get the ability
    to add users back onto the list and set permissions. The userlist now
    includes the Administrator and Everyone. All permissions are issued
    including full control. Some subfolders are accessible, some aren't. Some
    files are accessible and some aren't. No files (.pdf) will open. This is
    what is bizarre.

    I have deleted files and folders that others have created. I am an
    administrator and should expect to. But this problem doesn't seem to be
    subject to any rules or rationale.

    Thank you for your response and God Bless,

    Mark A. Sam
     
    Mark A. Sam, Jan 28, 2008
    #5
  6. I'm not sure I understand the problem, but did you also check the box to
    reset permission on child objects?
    What exact error are you getting?
    Anthony
    http://www.airdesk.com
     
    Anthony [MVP], Jan 28, 2008
    #6
  7. Mark A. Sam

    Mark A. Sam Guest

    Anthony,

    The message is, T:\<MainFolder>\<Subfolder><Subfolder> is not accessible.

    Access is denied.
     
    Mark A. Sam, Jan 29, 2008
    #7
  8. Mark A. Sam

    Mark A. Sam Guest

    There is a folder (with its subfolders) that I can access now, but I can't
    open the files. I get this message.

    There was an error opening this document. Access denied.

    I just discovered that I can open a document if I give the Administrator
    ownership, close the properties box open it again, then give Everyone
    permissions, then I can open the file. But there are over 18,000 files
    under the main folder so it isn't practical.

    Different subfolders have different property settings. I can't explain it.
    I can jump around and find that some folders are accessible as well as some
    files. Some permissions are editible and some aren't. One folder has all of
    its properties check, but some were disabled. When I clicked on the
    enabled checkboxes they became disabled but still checked.

    It doesn't make sense but it is what I am dealing with.

    Thanks for your help and God Bless,

    Mark
     
    Mark A. Sam, Jan 29, 2008
    #8
  9. Mark A. Sam

    Mark A. Sam Guest

    I've got it resolved. I discovered that I can select all the files in a
    folder and change their permissions together, so that's what I'm going to
    do, and pray that a disgruntled employee doesn't decide to wipe out the
    whole disk drive.
     
    Mark A. Sam, Jan 29, 2008
    #9
  10. Mark,
    The two things you need to do are:
    - reset ownership (as you have been doing) and check the box to Reset
    ownership on subcontainers;
    - reset permissions, checking the box to reset permissions on child objects.
    Obviously you need to be extremely careful not to lose track of the
    permissions that are supposed to be there. If you can find out what happened
    you have a chance to reverse it if you are careful. You need to reset at
    whatever level in the folder tree the problem occured,
    Hope that helps,
    Anthony
    http://www.airdesk.co.uk
     
    Anthony [MVP], Jan 29, 2008
    #10
  11. Mark A. Sam

    Mark A. Sam Guest

    Thank you Anthony,

    Checking the subcontainer checkbox fix it. I was working backwards, folder
    by folder. It would have taken me over a day to complete it all.

    God Bless,

    Mark
     
    Mark A. Sam, Jan 29, 2008
    #11
  12. Mark A. Sam

    Mark A. Sam Guest

    Anthony,

    I added a Security Group to the main folder which includes as its members,
    the Users that I don't want to be able to delete files. I set special
    permission denying Delete and Delete Folders and Files. I placed test files
    in one of the subfolders, logged in as one of the Users and was able to
    delete test files. If like you say, a user can't delete other's files,
    there must be some setting somewhere which allows anyone to delete anything.
    Is that possible?

    God Bless,

    Mark
     
    Mark A. Sam, Jan 29, 2008
    #12
  13. Mark,
    There's a few things to bear in mind:
    - Use Modify permissions instead of Full Control. This prevents a user from
    taking ownership and/or changing the permissions. Only administrators need
    to be able to change permissions
    - The Creator Owner has special rights.
    - Deny has some unexpected consequences, and so does not having Delete
    permissions, so Deny Delete might give you unexpected results, assuming the
    permissions was actually applied.
    - An explicit Allow has precedence over an inherited Deny. It is really
    better not to give permissions than to start setting Deny's.
    - Not having Delete permissions will prevent simple things like renaming or
    saving, for example: http://support.microsoft.com/kb/277867
    Hope that helps,
    Anthony
    http://www.airdesk.com
     
    Anthony [MVP], Jan 30, 2008
    #13
  14. Mark A. Sam

    Mark A. Sam Guest

    Anthony,

    Thanks again for your response. I understand what you are saying, but it
    doesn't jive with this system. The client has a network consultant. I'll
    let him figure it out. If he can't maybe I'll get the the client to try out
    your service.

    God Bless,

    Mark
     
    Mark A. Sam, Jan 30, 2008
    #14
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.