Re: Shared folder will be add deny administrators permission



See if you can place an Audit on the folder for successful change
of permissions by Everyone. If that will stick (not get altered as
when the Deny permissions show up) and you have audit of object
access (and privilege use assuming Administrators is owner and
the account making the change does not have a grant allowing the
change) then the security event log should at least point you to
when this is happening and by what account.

"Andy Liu" <AndyLiu@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:4860AFA1-ADD7-4147-86E7-120287061B86@xxxxxxxxxxxxxxxx
I found a strange issue in the Active Directory of my company these days;
the
user permission in Security option of the shared folder will be changed
automatically; it will be add the "Deny Administrators" entry and the
other
users who has the modify permission on this folder will be denied as well.
As a result, I have to take ownership this folder for change the
permission
back, unfortunately, the issue happened again some while after I changed
the
permission back.
I have checked the GPO, but no any finding.
Is there someone who knows this issue?

Our company's AD environment is a sub domain of the forest.

Please share your experience to me. Thanks!



.



Relevant Pages

  • Re: Network shares cannot connect
    ... Changed value to 0 just waiting to re-boot the server and test logins. ... Workstation Name: - ... let's focus on the Users Shared Folder first. ... To check this permission, please click the Advanced button, select ...
    (microsoft.public.windows.server.sbs)
  • Re: Network shares cannot connect
    ... Changed value to 0 just waiting to re-boot the server and test logins. ... Workstation Name: - ... let's focus on the Users Shared Folder first. ... To check this permission, please click the Advanced button, select ...
    (microsoft.public.windows.server.sbs)
  • MCSA/MCSE Self-training book from MS PRESS for exam 70-215 incorrect on file permission questions?
    ... includes the AccountingDept folder, which contains documents specific to the ... accounting department. ... The Accounting group includes all members of the ... AccountingDept folder by granting Read permission to the Accounting group ...
    (microsoft.public.win2000.file_system)
  • Re: Practice Test with Wrong Answers?
    ... "The Modify permission does not include the Delete Subfolders and Files ... so permanent employees cannot delete files form the Progress ... When I try this out the modify permissions for the parent folder get ...
    (microsoft.public.cert.exam.mcsa)
  • Re: Network shares cannot connect
    ... User Name: SERVER$ ... Regarding the shares accessing problem, I suggest you try following steps ... let's focus on the Users Shared Folder first. ... To check this permission, please click the Advanced button, select ...
    (microsoft.public.windows.server.sbs)