Re: "account unknown" on acl cannot be removed without blocking inheritence

From: Joe Richards [MVP] (humorexpress_at_hotmail.com)
Date: 01/31/04

  • Next message: Joe Richards [MVP]: "Re: Password Nerver Expires ACLs" 
    Date: Fri, 30 Jan 2004 23:41:20 -0500

    Let me guess that this is somewhere in the SYSVOL folder structure? Some of
    the folders there aren't really directories, they are links to other folders
    somewhere else on the file system.

    Which folder specifically are you having an issue with? 

    -- 
www.joeware.net
"David Grant" <anonymous@discussions.microsoft.com> wrote in message
news:706201c3e6a2$c9dadc80$a601280a@phx.gbl...
> I have several folders with an "Account Unknown" entry on
> the ACL that cannot be removed without turning off
> inheriting permissions.  However, the parent folder does
> not contain that ACL entry, indicating to me that
> the "Account Unknown" ACL entry is not being inherited.
> My questions are:
>
> 1.  Why do I need to turn off inheritence when clearly
> that particular ACL entery is not being inherited?
>
> 2.  Why do "Account Unknown" entries show up in the first
> place and how can I easily remove them?
>
> More info:
>
> Our domain has never had a trust relationship.  The box
> in question is a DC running Windows 2000 Server SP4.
> Some of the files and directories may have been copied
> from an NT4 DC in the past.
  • Next message: Joe Richards [MVP]: "Re: Password Nerver Expires ACLs"

    Relevant Pages

    • Re: Win NT Permission question ?
      ... inheriting permissions but the files in the folder are ... In your explaination you do mention that user3 can ...
      (Security-Basics)
    • Re: Read only attribute has 3 states
      ... It means that the files are inheriting the read only attribute from the ... parent folder. ... > He has Full Control on this folder. ... > change back to this odd state immediately. ...
      (microsoft.public.windowsxp.security_admin)
    • Re: permissions inheritance problem
      ... propagate to this object and all child objects', ... Permissions boxes are greyed out because it's inheriting them from its ... Most of the files created in this folder therefore ... the Desktop because its 'Allow inheritable permissions' box is still set ...
      (microsoft.public.windows.server.general)
    • Re: How to enforce "Explicit Allow" on a folder?
      ... > remove it since it's inheriting from a parent folder! ... >>> to user A. The best way to do it is to Deny all users ... >>> precidents over Allow, how do I make an Explicit Allow ...
      (microsoft.public.windows.server.active_directory)
    • Re: permissions on subfolders with drag and drop
      ... using drag and drop from a windows XP system. ... he moves the folder. ... fixing the permissions on the 2007 folder, ... If the problem is that you want moved folders to wind up always inheriting, ...
      (microsoft.public.windows.server.security)