Prev: Windows Volume License
Next: Backup Failures
From: Eddy Silvano on 11 Mar 2010 13:44
Hello,

Here is my issue - This is happening to my File Share server. We have a GPO
somewhere that keeps changing my NTFS Folders rights. My NTFS folder changes
to an unknown USER SID hence I can't access my folders/files. I have to force
myself to take ownership of the folder and then I can grant my Administrators
group the full control to the folder... As you know, this is a two step
process. First, I must take ownership... close the folder properties... Go
back to the folder properties and add my group Administrators (Full control).
I have too many folders/files to do this every couple of weeks... My junior
SysAdmin is doing this change by hand. I spent an entire evening looking for
a script solution.
1. I am using SUBINACL.EXE /Noverbose /subdirectories "\\servername\share\*"
/setowner=administrators.
2. XCACLS.VBS "SERVERNAME\SHARE" /T /E /G Administrators:F

This script works... but, I am still not there... My administrators group is
displaying the full control operations... But, if I access the folder
properties... my GUI folder doesn't have a checkmark for my local
Administrators group... (is this a glitch?) If you have a better script...
please share it with our group.
--
Best Regards,

Eddy Silvano
From: Phillip Windell on 11 Mar 2010 14:29
You only have one solution. Find the GPO responsible and fix it.


--
Phillip Windell

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------


"Eddy Silvano" <EddySilvano(a)discussions.microsoft.com> wrote in message
news:6AE5A95E-0AB6-4FF1-9AB6-5BACBAF6B739(a)microsoft.com...
> Hello,
>
> Here is my issue - This is happening to my File Share server. We have a
> GPO
> somewhere that keeps changing my NTFS Folders rights. My NTFS folder
> changes
> to an unknown USER SID hence I can't access my folders/files. I have to
> force
> myself to take ownership of the folder and then I can grant my
> Administrators
> group the full control to the folder... As you know, this is a two step
> process. First, I must take ownership... close the folder properties... Go
> back to the folder properties and add my group Administrators (Full
> control).
> I have too many folders/files to do this every couple of weeks... My
> junior
> SysAdmin is doing this change by hand. I spent an entire evening looking
> for
> a script solution.
> 1. I am using SUBINACL.EXE /Noverbose /subdirectories
> "\\servername\share\*"
> /setowner=administrators.
> 2. XCACLS.VBS "SERVERNAME\SHARE" /T /E /G Administrators:F
>
> This script works... but, I am still not there... My administrators group
> is
> displaying the full control operations... But, if I access the folder
> properties... my GUI folder doesn't have a checkmark for my local
> Administrators group... (is this a glitch?) If you have a better script...
> please share it with our group.
> --
> Best Regards,
>
> Eddy Silvano


 | 
Pages: 1
Prev: Windows Volume License
Next: Backup Failures