"Access Denied" Problem

[Alan Chwick]

I am the Admin of a small network. On one of our machines, which is
shared by 3-Users, one of them has lost their rights to their "My
Documents." I, as the Admin, also, can not access this directory.

I tried logging in as the Administrator and tried executing XCACLS with
the following options:
XCACLS "My Documents" /c /g administrator:rcfpoxewd:rcfpoxewd

I then rebooted, just to be on the safe side.

Logged in as the Admin and still could not access this directory.

Any ideas?

Alan

 

[Steven L Umbach]

Try taking ownership first as administrator. When you do such be sure to
select the option to "replace owner on subcontainer and objects". I also
like the free tool fileacl that can change permissions if you are an
administrator even if you are not the owner with the /force switch. If EFS
encryption is involved and something happened to the user's EFS private key
you may not be able to restore access to the files unless you restore his
private key from a backup of a .pfx file or use the Recovery Agent. The
command cipher will show if files are encrypted. I hope the users all have
separate user accounts as sharing a user account is not a security best
practice.--- Steve

http://www.gbordier.com/gbtools/fileacl.htm --- fileacl

 

[Alan Chwick]

Try taking ownership first as administrator. When you do such be sure to
select the option to "replace owner on subcontainer and objects". I also
like the free tool fileacl that can change permissions if you are an
administrator even if you are not the owner with the /force switch. If EFS
encryption is involved and something happened to the user's EFS private key
you may not be able to restore access to the files unless you restore his
private key from a backup of a .pfx file or use the Recovery Agent. The
command cipher will show if files are encrypted. I hope the users all have
separate user accounts as sharing a user account is not a security best
practice.--- Steve

http://www.gbordier.com/gbtools/fileacl.htm --- fileacl

Thanks.

Thing where more missed up then normal. I took ownership first, then
changed to ownership to the user. All seemed OK, but only some of the
sub-directories got the new owner.

I had to hand do the ones that didn't change. All is AOK now.

I think I'll go back to NOVELL, as an MS network is to complicated.

Alan