Utility to move/delete windows files regardless of ownership



I am a domain admin on an NT 4 domain. We are not able to upgrade do
AD for another year or so. Our main file server is a Win 2003 Standard
box. The problem I am trying to solve is moving and/or deleting large
directory structures from one disk to another. At firsr I tried doing
a move. I should've known better considering all these years
experience suffering with Microsoft products. As expected, several
thousand files into the move, it chokes saying "access is denied" to
certain files (in this particular case 'flash9.ocx').

I did a search for this file and right-clicked and looked at the
security tab. It indicates that administrators should have full
access. However, although all the boxes on the left are checked ('full
control', 'read', 'write', etc.) they are grayed out. The owner is
listed as "computername\administrators". As I mentioned, I am a domain
administrator. I checked the admin gorup on the box and it lists
domain admins. Just for grins I added myself as well-- "domainname
\myname". The result is still the same; I can't delete the file.

I've tried going to the top level directory and then removing all
permissions and adding full control for myself. However, I still can't
delete these certain files unless I first take ownership of this leval
and all files below. This is ridiculous! On a decent OS I am able to
set a priv that basically says "I am an admin and understand the
consequences. Please let me move/delete these files".

Does anyone know of any freeware/shareware that will allow me to
manipulate these files without changing the ownership? We need the
permissions to stay the same and apparently Windows is not honoring
the permissions correctly anyway. These files were put here by a
backup program (HP Omniback) which restores the original permissions
upon a restore form tape.

.



Relevant Pages

  • "Is it possible to make it impossible for a domain admin to take ownership of a folder and its
    ... >"Is it possible to make it impossible for a domain admin ... permissions, take ownership, ... >to this file nor should he be able to change permissions ... >take ownership of a folder and it's contents? ...
    (microsoft.public.win2000.security)
  • Re: takeown access denied on w2k3
    ... Have you tried to remove that "mysterious" SID from the list of permissions ... >> You didn't mention if you try to take ownership of that folder using ... >> domain admin account. ... >> ask/guide user to take ownership on their own. ...
    (microsoft.public.windows.server.general)
  • Re: User able to create folders on network drive he had no permission
    ... setup for him on the network was able to create files and folders on ... a network drive he should only have had read access to. ... The PC was setup using a domain admin account (I know, ... difference with the *user* permissions on the network. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Not able to edit Group Policy Objects,
    ... Uninstalling Director will fix the problem, installing it bound only to the ... > Make sure the client has "read" permissions so that the group policy can ... use a domain admin or ...
    (microsoft.public.windows.server.active_directory)
  • Re: Normal.dot issues
    ... There can be a whole world of difference between a real Administrator and someone who has Domain Admin permissions. ... the normal template? ...
    (microsoft.public.word.application.errors)