gdoliver

I have a Windows Server 2003 system. I tried to change the permissions on a folder on our file server by explicitly adding certain users and leaving

Creator Owner
Domain Admins
Administrators
System

in the ACL and removing a certain user group I did not want to have access anymore thinking that will kill access to all users in that group trying to browse that folder.

I could not delete the group because it was inheriting permissions from a parent folder and I needed to break the inheritance. I tried to break the inheritance and made a mistake and ended up removing all groups including administrators from the ACL. It happened in an instance.

I thought that I could go back to the parent folder and replicate the permissions back down the subtree hierarchy so we can access the folder again but a friend told me that won't work because all the user objects was removed from the ACL. All I get is an "Access is Denied" error message when trying to access that folder.

Does anybody know of a way or tool that can restore the administrator permissions to this folder object?

Or am I dead in the water on this?

lorjack

The Administrator can take ownership of the file even if there are no entries in the ACL. You need to change the owner of the folder to the Administrators and then you will be able to create permissions for the folder again. To change the ownership of the file: Start in the properties dialog box of the folder > click the security tab > click advanced > click the owner tab > change the owner to administrators or another admin account that you are logged in with. If it is already set like that then you can just go and put the entries back into the ACL. And what happened when you removed all the entries is you clicked remove when you broke the inheritance and you needed to click copy which would of kept the exiting entries.

gdoliver

lorjack

Thanks, that did it

I'm now loved by everybody all over again...until my next screw up!

g