Author: ChrisBedford
Subject: What if even accesschk can't read the ACL?
Posted: 24 September 2014 at 9:25pm
Hi Gurus
On a Server 2003 (Small Business Server) machine, somehow a user has managed to create 5 files that *no-one* and *nothing* can get access to.
- Scheduled backups fail (failed to copy file - access denied)
- Attempting to change permissions by pushing attributes down from the folder, "An error occurred applying security information to: D:\Shared Files\TV Images\filename.jpg - Access is denied"
- Attempting to take ownership also via containing folder, exactly the same error
- Attempting to modifyy any of the affected files directly, when I right-click and select Properties on the files themselves I don't get a security tab, only General and Summary
- And AccessChk reports "Error getting security for D:\Shared Files\TV Images\filenamejpg: Access is denied."
Above results all as Domain Administrator logged on to the server console, and AccessChk run in elevated command prompt.
I've tried also accessing the file from user workstations (users who are explicitly listed in the folder permissions - no I have no idea why they are, but that's a whole different topic isn't it) and those users at least get the full file properties dialog box, but on the Security tab they still get "You do not have permission to view or edit this object's permission settings" and attempting to take ownership also results in access denied.
Oh - The "Take Ownership" dialog says under current owner "Unable to display current owner."
Anyone any idea how to fix this?
Chris
Subject: What if even accesschk can't read the ACL?
Posted: 24 September 2014 at 9:25pm
Hi Gurus
On a Server 2003 (Small Business Server) machine, somehow a user has managed to create 5 files that *no-one* and *nothing* can get access to.
- Scheduled backups fail (failed to copy file - access denied)
- Attempting to change permissions by pushing attributes down from the folder, "An error occurred applying security information to: D:\Shared Files\TV Images\filename.jpg - Access is denied"
- Attempting to take ownership also via containing folder, exactly the same error
- Attempting to modifyy any of the affected files directly, when I right-click and select Properties on the files themselves I don't get a security tab, only General and Summary
- And AccessChk reports "Error getting security for D:\Shared Files\TV Images\filenamejpg: Access is denied."
Above results all as Domain Administrator logged on to the server console, and AccessChk run in elevated command prompt.
I've tried also accessing the file from user workstations (users who are explicitly listed in the folder permissions - no I have no idea why they are, but that's a whole different topic isn't it) and those users at least get the full file properties dialog box, but on the Security tab they still get "You do not have permission to view or edit this object's permission settings" and attempting to take ownership also results in access denied.
Oh - The "Take Ownership" dialog says under current owner "Unable to display current owner."
Anyone any idea how to fix this?
Chris