Windows Server

Guest

I have a Windows 2003 server that I am working on. I am logged in as
administrator and have run across a folder that when I try to access
it, I get the standard 'access is denied' error message.

When I have run into this problem before, I was always able to go take
ownership of the folder/file and then change the security. However,
with this folder, I don't have a security tab available to me. When I
select properties for the folder, the only tabs are general and
customize.

How do I get access to this folder?

Thanks
-- Jeff Chastain

Miha Pihler [MVP] · Guest

Hi,

Try to take permission with System permissions -- if it will help.

How to get System permissions?

Log on to your PC or server as administrator. Open command line and enter
this command line:

at 20:09 /interactive cmd.exe

20:09 is time when scheduled task should run. Set it to about 1 minute more
then current time and press enter to set it off... Wait about a minute and
new cmd.exe will show up. Note: this will only work from console and not
from e.g. Terminal Services -- so you can not use RDP connection to the
server.

When new console window opens (in about a minute) enter this in it:

explorer

and click OK. Try to open your folder from this session of explorer and/or
try to take ownership. You might even want to try xcacls again from command
line (but you the command line that now has system permissions...)...

I hope it helps,

--
Mike
Microsoft MVP - Windows Security

<jeff.chastain@hp.com> wrote in message
news:1130176878.404738.62060@g44g2000cwa.googlegroups.com...

jeff.chastain@hp.com · Guest

"fusebox"

Properties shows it as a 0 byte folder containing 0 files and 0
folders.

Thanks
-- Jeff Chastain

Miha Pihler [MVP] · Guest

Hi,

What is the folder's name?

--
Mike
Microsoft MVP - Windows Security

<jeff.chastain@hp.com> wrote in message
news:1130170016.652295.30710@o13g2000cwo.googlegroups.com...

jeff.chastain@hp.com · Guest

I am logged in on the administrator account, so there should be nothing
I don't have access to. I checked the Group Policy option you referred
to and it was not configured. I changed it to disabled, but that did
not effect anything.

If I select properties on any other object, I see the security tab. It
is only on this one folder that the security tab is missing.

I went ahead and checked the dll file as well and the administrators
group has full control there, so that is not an issue.

I have tried using xcacls, but I am getting an access denied message
there as well when I attempt to change the permissions.

This folder is really locked - I have never seen anything like this
before.

Thanks for the help.
-- Jeff Chastain

Steven L Umbach · Guest

There is a Group Policy option that can hide the security tab that would
hide it for all files on the computer. Look under user
configuration/administrative templates/Windows components/Windows explorer -
hide security tab. Set that to disabled in local Group Policy [gpedit.msc]
or whatever Group Policy that is applying to the user that you are logging
on as. You can use the Resultant Set of Policy mmc snapin on that server to
see what Group Policies and what settings are being applied to that computer
and user. Also the security tab will not appear if the user does not have
read permissions to the Rshx32.dll file in the %systemroot%\system32 folder.
You can also view and manage security permissions with command line
utilities such as cacls and xcacls.vbs and my favorite is fileacl. Both
xcacls.vbs and fileacl can also change ownership of folders or files. ---
Steve

http://www.gbordier.com/gbtools/fileacl.htm --- fileacl
http://support.microsoft.com/?id=825751 --- xcacls.vbs

<jeff.chastain@hp.com> wrote in message
news:1130170016.652295.30710@o13g2000cwo.googlegroups.com...

Steven L Umbach · Guest

That is interesting that it is only the one folder shows that behavior.
Mike's suggestion sounds interesting. The only other thing I can suggest
right know is to run Check Disk and select the option to fix errors
automatically. If you want to delete the folder/file and everything else
fails see the link below for possibilities and try Safe Mode. --- Steve

http://support.microsoft.com/?kbid=320081

<jeff.chastain@hp.com> wrote in message
news:1130174925.398875.175230@f14g2000cwb.googlegroups.com...

jeff.chastain@hp.com · Guest

This appears to have done it. Thanks for the help.

Maksim Zyatnin · Guest

An idea :) Set owner on parent object, check "Inherit from parent..." and
"Replace on child..." boxes. You can do this on 1-up level folder.

	Windows Server Forum Index -> Security	All times are GMT
Page 1 of 1