Click here to get back home

Cleaning Up Files that are Missing NTFS Permissions
 Home | NewsGroups | Search | About
Login Password
Register Now!
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Cleaning Up Files that are Missing NTFS Permissions John Lockie 03-20-2006
Posted by John Lockie on March 20, 2006, 11:54 am
Please log in for more thread options
 Hi, I figure this is the best group to post this in since the problem I
am having is related to file security / NTFS permission.

I run a network and we have multiple file shares (Win 2003 SE)

One of our employees has copied files from his laptop (which is a
member of our root domain) to the network shares (one folder with a few
files). During this copy process somehow all of the NTFS security
configurations were blown out (on the folder being copied).

Thankfully, the user has his original files still so being locked out
of the network copies is not a big deal. I believe this was a fluke as
a 2nd attempt to copy worked fine.

The problem is that I still have this one folder on the network that
refuses to allow me to delete it. To keep the system looking clean I
hid the folder, and am now in the hunt for a way to be able to delete
this folder (as domain Admin). I have a feeling our backups will now
have a permanent error too (which I will not like) and be forced to
skip this folder during backup.

So, is there a way for System Admins to be able to purge folders/files
when users remove all NTFS permissions? I remember in my MCSE class we
discussed this as a possible problem, but never any solutions.

Thanks in advance,
John


Posted by Allen on March 20, 2006, 1:13 pm
Please log in for more thread options
 Why can you not take ownership of that network share folder where you copied
the laptop files to? And are you aware that when you copy files from one
NTFS folder to another it will inherit the copied to folders permissions? So
you are saying that as an Domain Administrator you cannot delete files from
that network share?


> Hi, I figure this is the best group to post this in since the problem I
> am having is related to file security / NTFS permission.
>
> I run a network and we have multiple file shares (Win 2003 SE)
>
> One of our employees has copied files from his laptop (which is a
> member of our root domain) to the network shares (one folder with a few
> files). During this copy process somehow all of the NTFS security
> configurations were blown out (on the folder being copied).
>
> Thankfully, the user has his original files still so being locked out
> of the network copies is not a big deal. I believe this was a fluke as
> a 2nd attempt to copy worked fine.
>
> The problem is that I still have this one folder on the network that
> refuses to allow me to delete it. To keep the system looking clean I
> hid the folder, and am now in the hunt for a way to be able to delete
> this folder (as domain Admin). I have a feeling our backups will now
> have a permanent error too (which I will not like) and be forced to
> skip this folder during backup.
>
> So, is there a way for System Admins to be able to purge folders/files
> when users remove all NTFS permissions? I remember in my MCSE class we
> discussed this as a possible problem, but never any solutions.
>
> Thanks in advance,
> John
>



Posted by John Lockie on March 20, 2006, 1:41 pm
Please log in for more thread options
I cannot take ownership because the security tab is just missing on
that folder. Otherwise, this would be my typical solution. Literally,
on this specific folder there is no security tab. I tried to use the
"replace permission entries on all child objects" option on the parent
folder, but then I get a permission error while it performs the
permission replacement.

I am aware that NTFS permissions are normally inherited when a folder
is copied from one location to another. I would have expected this
when our employee copied the files, yet it doesn't appear to be what
happened. I believe that during the copy something became corrupt.

The only thing I find to be a monkey wrench is that he was doing this
copy procedure through one of our Citrix ICA connections. Although I
do this all day every day and have never seen this happen.

So I am left having to not worry about what caused this (since I just
don't have time to fret over it as I cannot see anything I did wrong in
implementation and no other users are complaining of this happening on
a regular basis).

As far as hardware, I have considered that one of the hard drives in my
array has gone bad. This file is located on a drive that exists in a
new 2TB RAID5 external array. All the disks are clean, new, and error
free.

That said, I still am not happy that I have this rogue folder outside
of my control as far as being able to remove it.


Posted by Allen on March 20, 2006, 1:51 pm
Please log in for more thread options
A couple of suggestionss. Seeing how the network share folder, according to
you contains only a few files, create a new folder, apply your NTFS
permissions and copy them files over to the new folder. Boot in Safe Mode
and see if you can delete the folders from a DOS prompt.


>I cannot take ownership because the security tab is just missing on
> that folder. Otherwise, this would be my typical solution. Literally,
> on this specific folder there is no security tab. I tried to use the
> "replace permission entries on all child objects" option on the parent
> folder, but then I get a permission error while it performs the
> permission replacement.
>
> I am aware that NTFS permissions are normally inherited when a folder
> is copied from one location to another. I would have expected this
> when our employee copied the files, yet it doesn't appear to be what
> happened. I believe that during the copy something became corrupt.
>
> The only thing I find to be a monkey wrench is that he was doing this
> copy procedure through one of our Citrix ICA connections. Although I
> do this all day every day and have never seen this happen.
>
> So I am left having to not worry about what caused this (since I just
> don't have time to fret over it as I cannot see anything I did wrong in
> implementation and no other users are complaining of this happening on
> a regular basis).
>
> As far as hardware, I have considered that one of the hard drives in my
> array has gone bad. This file is located on a drive that exists in a
> new 2TB RAID5 external array. All the disks are clean, new, and error
> free.
>
> That said, I still am not happy that I have this rogue folder outside
> of my control as far as being able to remove it.
>



Posted by Steven L Umbach on March 20, 2006, 5:37 pm
Please log in for more thread options
There may be file corruption involved. I would try running Check Disk and
select the option to automatically repair file system errors. If that does
not help you might want to try command line tools to make sure have full
control permissions to delete the files and you may need to take ownership
first. Xcacls.vbs and fileacl are two create command line utilities for file
ACLs and ownership. The links below explain more on them. --- Steve

http://support.microsoft.com/?id=825751 --- xcacls.vbs
http://www.gbordier.com/gbtools/fileacl.htm --- fileacl

> Hi, I figure this is the best group to post this in since the problem I
> am having is related to file security / NTFS permission.
>
> I run a network and we have multiple file shares (Win 2003 SE)
>
> One of our employees has copied files from his laptop (which is a
> member of our root domain) to the network shares (one folder with a few
> files). During this copy process somehow all of the NTFS security
> configurations were blown out (on the folder being copied).
>
> Thankfully, the user has his original files still so being locked out
> of the network copies is not a big deal. I believe this was a fluke as
> a 2nd attempt to copy worked fine.
>
> The problem is that I still have this one folder on the network that
> refuses to allow me to delete it. To keep the system looking clean I
> hid the folder, and am now in the hunt for a way to be able to delete
> this folder (as domain Admin). I have a feeling our backups will now
> have a permanent error too (which I will not like) and be forced to
> skip this folder during backup.
>
> So, is there a way for System Admins to be able to purge folders/files
> when users remove all NTFS permissions? I remember in my MCSE class we
> discussed this as a possible problem, but never any solutions.
>
> Thanks in advance,
> John
>



Similar ThreadsPosted
ntfs permissions, ownership, adding permissions January 13, 2006, 2:03 pm
Share permissions conflicting with NTFS permissions May 18, 2006, 1:16 pm
NTFS Drop Folder - Blocking Owner from changing files May 19, 2008, 4:26 pm
NTFS Permissions February 20, 2006, 7:11 pm
NTFS Permissions August 16, 2006, 4:44 am
NTFS Permissions and subfolders December 14, 2005, 2:06 pm
NTFS , folder permissions ! Need Help January 4, 2006, 11:51 am
NTFS permissions quandary April 18, 2007, 4:25 pm
NTFS permissions/deny override bug? November 1, 2005, 7:56 pm
Minimum NTFS Permissions on the SystemDrive May 11, 2006, 12:10 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap