Permissions Puzzle

From: Jade (anonymous_at_discussions.microsoft.com)
Date: 10/26/03


Date: Sat, 25 Oct 2003 16:57:39 -0700


This week, we were switching from a Netware server to a
Windows 2000 server. We created a folder called Data and
shared it (the group everyone, has full permissions on
the share tab) on the Windows 2000 server and into it, we
copied from the Netware server a folder called Images.
The Images folder contains multiple subfolders and jpg
files within the subfolders.

Two days after copying the Images folder over onto the
Windows 2000 server, we noticed that permissions hadn't
been set properly. That is, as it stood, "everyone" had
full control set on the Security tab to the Images folder-
-whoops!

On the Images folder, on the Security tab, we removed
the "everyone" group. We then added the HRS group and
gave them Full Control. We added the Administrator group
and gave them full control and finally, we added the HRS-
RO group and gave them Read, List Folder Contents, Read
and Execute Control.

Everything seemed to be working okay, except we've
discovered that any file that was created in the two-day
period (before we reset the permissions), only the HRS
group can access. The Administrator's group can't access
it and the HRS-RO group can't access it. However, all
groups seem to be able to access files correctly that
were copied over from the Netware server and files that
were created after we reset the permissions. As an
Administrator, if I check the properties on the folders
that hold the affected files, permissions appear correct
as they were reset, and the "Allow inheritable
permissions to propagate this object" is checked. If I
try to check the permissions on the affected files, I
receive the message that I don't have permission to view
or edit the current permission settings for this file.
If I add an administrator account to the HRS group and
then check the permissions on the affected files, the
only group that has any permissions set for this file, is
the HRS group.

I'm wondering why, when I reset the permissions, the
Administrator group and the HRS-RO group's permissions
didn't get carried down to these affected files. Like I
said, it's only the files that were created in the two
days before I reset the permissions that seem to be
affected. Also, I'm wondering how to correct this. Is
there a setting or command that I can run to re-propagate
the permissions down to all folders, subfolders and files
contained within my Images folder.

Any help would be appreciated as this affects
approximately 500 files located in various subfolders.

TIA.



Relevant Pages

  • Re: Minimum NTFS Permissions - Theres such a thing???
    ... ?2001 Microsoft Corporation. ... HOW TO: Set Minimum NTFS Permissions Required for IIS 5.0 to Work WGID:198 ... " List Folder Contents" ...
    (microsoft.public.inetserver.iis.security)
  • Re: Unable to delete orphaned 1.5 GB System Restore folder
    ... The fact that the tech support is based in India has nothing to do with the ... If so you may want to leave this folder alone. ... down to all children folders because i can set those permissions to ... try deleting from the command line using system by using the AT ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Unable to delete orphaned 1.5 GB System Restore folder
    ... The only computers i fix are my own. ... If so you may want to leave this folder alone. ... it includes all subdirectories with inherited permissions. ... try deleting from the command line using system by using the AT ...
    (microsoft.public.windowsxp.security_admin)
  • RE: no OWA
    ... have the correct permissions was the "inetpub" folder. ... Correct the settings in IIS: ... click to check the "Hide All Microsoft Services" ...
    (microsoft.public.windows.server.sbs)
  • Re: Word mail merge data source
    ... "Peter Jamieson" wrote: ... Word on it) then there may be a problem if the folder containing the data ... Word builds a connection string. ... superset of other users' permissions - for example, ...
    (microsoft.public.word.vba.general)