1

I have a user whose home drive has only that user in the permissions. No administrators, etc.

I have tried to take ownership as a local administrator however I cant seem to apply settings to the child objects -- it still gives me a permission denied error.

I know there are some handy CLI utils that can redo permissions. Any ideas? Or even a way to do it through Windows?

The file server is a 2008 R2 server.

Jon Seigel
  • 468
  • 3
  • 18
JohnyV
  • 938
  • 4
  • 26
  • 45

2 Answers2

1

You can do this from the GUI. You need to take ownership of the folder and subfolders (done on the "Ownership" tab of the "Advanced" security properties). Once you've done that, you can alter the permissions to your heart's content.

If you want to do it via CLI, look at this answer for a small example script.

Community
  • 1
Evan Anderson
  • 141,881
  • 20
  • 196
  • 331
  • I have already tried to take ownership and selected replace owner on subcontainers and objects but I still cant get access to the child folders and files. The administrator account has "special permissions" that are inherited from the parent. – JohnyV Aug 13 '10 at 01:41
  • Yeah I made an error. I got it working using default windows permissions. I was selecting to only do it to this container not subcontainers. Thanks – JohnyV Aug 13 '10 at 01:54
  • Do you mean you "have tried to take ownership as a local administrator" remotely? Do you mean that when you login locally as local administrator you cannot take ownership? Or you had tried to use domain administrator account? I believe you cannot do this unless local Administrators group on client machine had included domain admin account in itself – Gennady Vanin Геннадий Ванин Aug 13 '10 at 07:54
0

FILEACL is a utility worth checking. It will let you look at inheritance, etc.

You can get it here: http://www.gbordier.com/gbtools/fileacl.asp