stupid mistake

  • Thread starter Thread starter Jayjay
  • Start date Start date
J

Jayjay

I just pulled a boner.

I just created a directory on the server and moved files into it.
I wanted the directory on the server secured.

Default security was:
Everyone: Full Access

I changed access to:
DomainAdmins: Full Access
IT Admins: Full Access
Everyone: No access

I should have just removed the everyone group, but didn't, then
clicked update.

Now I can't get into the folder or its files from either as a domain
admin or as an IT Admin.

How do you correct this? I had a momentary brain lapse and forgot
that "No Acess" always wins.
 
If you take ownership of the folder, which you should be able to do as the
administrator, you will have the rights to redo the permissions.

Right click--Properties
Security tab:
You should see an error saying:
---------------------------
Security
---------------------------
You do not have permission to view or edit
the current permission settings for [folder],
but you can take ownership or change
auditing settings.
---------------------------
OK
---------------------------

Click OK
Click Advanced
Click Owner tab
Select yourself in the "change owner to"
Check "Replace owner..."
Click OK


Ray at work
 
Jayjay said:
I just pulled a boner.

I just created a directory on the server and moved files into it.
I wanted the directory on the server secured.

Default security was:
Everyone: Full Access

I changed access to:
DomainAdmins: Full Access
IT Admins: Full Access
Everyone: No access

I should have just removed the everyone group, but didn't, then
clicked update.

Now I can't get into the folder or its files from either as a domain
admin or as an IT Admin.

How do you correct this? I had a momentary brain lapse and forgot
that "No Acess" always wins.

It should still be possible for the owner of the directory to change the
permissions, try that first.
 
He has to take ownership of the directory and ALL of the files to fix it by
himself.

He might try subinacl.exe (resource kit) and see if it will bypass this
mess.

--
Herb Martin
Ray at said:
If you take ownership of the folder, which you should be able to do as the
administrator, you will have the rights to redo the permissions.

Right click--Properties
Security tab:
You should see an error saying:
---------------------------
Security
---------------------------
You do not have permission to view or edit
the current permission settings for [folder],
but you can take ownership or change
auditing settings.
---------------------------
OK
---------------------------

Click OK
Click Advanced
Click Owner tab
Select yourself in the "change owner to"
Check "Replace owner..."
Click OK


Ray at work

Jayjay said:
I just pulled a boner.

I just created a directory on the server and moved files into it.
I wanted the directory on the server secured.

Default security was:
Everyone: Full Access

I changed access to:
DomainAdmins: Full Access
IT Admins: Full Access
Everyone: No access

I should have just removed the everyone group, but didn't, then
clicked update.

Now I can't get into the folder or its files from either as a domain
admin or as an IT Admin.

How do you correct this? I had a momentary brain lapse and forgot
that "No Acess" always wins.
 
Olof Lagerkvist said:
It should still be possible for the owner of the directory to change the
permissions, try that first.

I am the owner and it will not allow me to change permissions.

I will try Herb's suggestion tomorrow, or hopefully someone else has other
ideas.
 
A simple "take ownership" and reset of the permissions should be all that's
required.

Cheers

Oli
 
Ray at said:
Click OK
Click Advanced
Click Owner tab
Select yourself in the "change owner to"
Check "Replace owner..."
Click OK

Thanks. I landed in the same mess, and this worked.
Thank you very much

Sreekumar
 
Back
Top