Click here to get back home

permissions on subfolders with drag and drop
 Home | NewsGroups | Search | About
Login Password
Register Now!
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
permissions on subfolders with drag and drop bmense 07-18-2007
Get Chitika Premium
Posted by bmense on July 18, 2007, 3:16 pm
Please log in for more thread options
 I just migrated from a Novell server to a new Microsoft Cluster with
Windows 2003 R2.

I've ran many MS servers but never ran into this issue.

My setup is something like this

I:\Group\ACT\ ACT Group with full rights
I:\Group\ACT\Year\ Year Group with full rights

A user creates a 2007 Directory in I:\Group\ACT\, then realizes that
it should be under Year.
using drag and drop from a windows XP system. he moves the folder.

Users wth full access in the Year Group, don't have access to the new
2007 year folder.

I've tried this with cut and paste and the rights work ok.

Is there a way to fix this problem?


Posted by Al Dunbar on July 18, 2007, 11:32 pm
Please log in for more thread options
>I just migrated from a Novell server to a new Microsoft Cluster with
> Windows 2003 R2.
>
> I've ran many MS servers but never ran into this issue.
>
> My setup is something like this
>
> I:\Group\ACT\ ACT Group with full rights
> I:\Group\ACT\Year\ Year Group with full rights
>
> A user creates a 2007 Directory in I:\Group\ACT\, then realizes that
> it should be under Year.
> using drag and drop from a windows XP system. he moves the folder.
>
> Users wth full access in the Year Group, don't have access to the new
> 2007 year folder.
>
> I've tried this with cut and paste and the rights work ok.
>
> Is there a way to fix this problem?

Depends on what you consider to be the problem. If it is just a matter of
fixing the permissions on the 2007 folder, an account with change
permissions privileges (i.e. an administrator) can cause the permissions of
that folder to be inherited from the parent.

If the problem is that you want moved folders to wind up always inheriting,
your options are:

- copy the folder then delete the original. the desired permissions will be
inherited statically from the parent.
- use cut and paste - the paste part is functionally more like a copy than a
move. This may be true only in the case where the drive is on a different
computer than the one from which the copy is run.
- make sure that folders to be moved have been set to dynamically inherit
permissions from the parent.

I find when I move folders like this, sometimes the permissions are changed
and sometimes they are not. I think it may have something to do with how the
original permissions were applied, which can be a combination of various
permission-setting tools and o/s upgrade paths taken (NT to 2k to 2k3). When
I move folders, I always check and fix if necessary. When our users move
folders it is most often within a folder tree where all branches have the
same permissions, so the issue is moot.

/Al



Posted by Roger Abell [MVP] on July 19, 2007, 12:27 pm
Please log in for more thread options
Al gave you quite a bit of info. I just want to point out the
short-word rule for pre-Vista systems.
An intrapartition move takes explict (non-inherited) permissions
along on the moved object and remain in effect in the moved-to
location, but inherited permissions are always (eventually) those
of the location of the object.
An interpartition move always results in the moved object having
permissions appropriate for / determined solely by the moved-to
location.
To avoid problems, do an intrapartition move by copying and
then deleting the copied.

Roger

>I just migrated from a Novell server to a new Microsoft Cluster with
> Windows 2003 R2.
>
> I've ran many MS servers but never ran into this issue.
>
> My setup is something like this
>
> I:\Group\ACT\ ACT Group with full rights
> I:\Group\ACT\Year\ Year Group with full rights
>
> A user creates a 2007 Directory in I:\Group\ACT\, then realizes that
> it should be under Year.
> using drag and drop from a windows XP system. he moves the folder.
>
> Users wth full access in the Year Group, don't have access to the new
> 2007 year folder.
>
> I've tried this with cut and paste and the rights work ok.
>
> Is there a way to fix this problem?
>



Similar ThreadsPosted
NTFS Permissions and subfolders December 14, 2005, 2:06 pm
add permissions to all subfolders, not replace July 9, 2007, 1:59 pm
HOWTO: Creating a Drop-Only Shared Folder June 9, 2008, 3:05 pm
NTFS Drop Folder - Blocking Owner from changing files May 19, 2008, 4:26 pm
ntfs permissions, ownership, adding permissions January 13, 2006, 2:03 pm
Share permissions conflicting with NTFS permissions May 18, 2006, 1:16 pm
Permissions December 8, 2005, 2:09 pm
IIS permissions January 24, 2006, 6:50 pm
Permissions July 13, 2006, 5:09 pm
Permissions August 11, 2006, 12:29 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap