Sign in with
Sign up | Sign in
Your question

permissions fouled up on user folder

Last response: in Windows 2000/NT
Share
Anonymous
a b 8 Security
November 19, 2004 2:19:09 PM

Archived from groups: microsoft.public.win2000.security (More info?)

In a user's home directory, there is a folder that has become unaccessible.
The permissions for all folders in her home directory should read Admins:Full
Control and User:Full Control, all inherited from the parent. This one reads
Admins:Read&Execute (no write, no delete), inherited from the parent (but
that's not the parent's permissions). Because of this, the user can't read
the folder, and I can't change the permissions. Is there any way, any
utility or hack, to override those permissions so I can reset them to the way
they should be?
Anonymous
a b 8 Security
November 20, 2004 2:12:24 AM

Archived from groups: microsoft.public.win2000.security (More info?)

Logon as administrator and take ownership which will allow you to
change/enhance permissions. Go to folder properties/security/advanced/owner
and select administrators as new owner. Also check the box to replace owner
on subcontainers and objects. First I would run Check Disk on the volume to
see if any problems are found that it probably can correct. --- Steve


"BFH" <BFH@discussions.microsoft.com> wrote in message
news:9492008A-A418-4559-96B5-DC3910D8D358@microsoft.com...
> In a user's home directory, there is a folder that has become
> unaccessible.
> The permissions for all folders in her home directory should read
> Admins:Full
> Control and User:Full Control, all inherited from the parent. This one
> reads
> Admins:Read&Execute (no write, no delete), inherited from the parent (but
> that's not the parent's permissions). Because of this, the user can't
> read
> the folder, and I can't change the permissions. Is there any way, any
> utility or hack, to override those permissions so I can reset them to the
> way
> they should be?
Anonymous
a b 8 Security
November 20, 2004 12:17:36 PM

Archived from groups: microsoft.public.win2000.security (More info?)

Then, after doing as Steve has suggested, go back to the
root folder of the user's profile, access the NTFS security
dialog, go into the advanced view, and check to replace
permissions on all subordinate files and folders.
This procedure will reset the directory and its contents
where you had to take ownership (an any others) back into
having permissions set purely by inheritance.
You could achieve the same effect on the directory itself
where ownership was taken, but accessing its NTFS
security dialog, making sure the box to allow inherited
permissions is on, and then removing any explicitly set
values. However, this would remove only this location
where inheritance is interrupted, while the first procedure
would remove them all.
--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"Steven L Umbach" <n9rou@n0-spam-for-me-comcast.net> wrote in message
news:s5vnd.360317$wV.156817@attbi_s54...
> Logon as administrator and take ownership which will allow you to
> change/enhance permissions. Go to folder
properties/security/advanced/owner
> and select administrators as new owner. Also check the box to replace
owner
> on subcontainers and objects. First I would run Check Disk on the volume
to
> see if any problems are found that it probably can correct. --- Steve
>
>
> "BFH" <BFH@discussions.microsoft.com> wrote in message
> news:9492008A-A418-4559-96B5-DC3910D8D358@microsoft.com...
> > In a user's home directory, there is a folder that has become
> > unaccessible.
> > The permissions for all folders in her home directory should read
> > Admins:Full
> > Control and User:Full Control, all inherited from the parent. This one
> > reads
> > Admins:Read&Execute (no write, no delete), inherited from the parent
(but
> > that's not the parent's permissions). Because of this, the user can't
> > read
> > the folder, and I can't change the permissions. Is there any way, any
> > utility or hack, to override those permissions so I can reset them to
the
> > way
> > they should be?
>
>
Anonymous
a b 8 Security
November 22, 2004 3:46:09 AM

Archived from groups: microsoft.public.win2000.security (More info?)

On Sat, 20 Nov 2004 09:17:36 -0700, "Roger Abell" <mvpNOSpam@asu.edu>
wrote:

Hi all,

I'd like to add that, after having the same trouble two times -
involving two different users - and the gui was of no help to me. The
folder was too heavily messed with, and everything froze up, unstable,
crash. I tried Xcacls to no avail. Everything seemed OK, but wasn't.
After logging out, a new profile was created. Again and again.

To cut it short, I deleted the account, secured the data and went
looking for the source of the trouble. Turned out to be some website,
with some crazy scripting going on while information about their
software was shown.

The anti-virus solution didn't see it, two spy removal tools didn't
see it.

I hope this was of total irrelevance to the original poster;-)

GreetZ
MBH
!