After security change, Word & Excel files are read-only or encrypt

[Guest]

We have one folder on our network that needs to be accessed by only a few
select people. It was inheriting the rights from the previous folder, which I
disabled to add only the few people that need access.

After this was done, files being opened from that folder (excel and word)
are popping up with an error message "Excel cannot access '-document name-'.
The document may be read-only or encrypted. Clicking ok, another message pops
up saying "Cannot access '-document name-'."

Right clicking on the file on the network, there is no Read-Only attribute
set, but even if I tried to put a check in the box and click ok, I get an
"Access Denied" message.

The file resides on a 2003 Server being accessed by XP Pro SP2 clients. I
found an Excel and Word error solution on Microsoft regarding changing the
Folder Options to "Windows Classic", but this did not work. It doesn't seem
to be related to the clients, but rather the file itself.

I even tried changing the security back to inheriting rights, and the same
problem exists. It's becoming very frustrating.. any help!?

 

[Guest]

Sounds like incorrect permissions on the files. When you disabled inheritance
on the folder in question, did you copy or replace the permissions that were
inherited? Could be that you removed the "Everyone" permissions when making
the change which can cause problems. Note that "Everyone" is a hidden, built
in group that Windows system uses and does not grant users permissions
directly.

If you want correctly reset the permissions to the inherited settings, make
sure you check both the boxes under Advance Security Settings to inherit
permission entries and to prelace permissions on all child objects. This
should replace all the original permissions.

If you want to set the permissions for the specific group, uncheck Inherit
from parent in Advanced Security, copy permissions and remove only the item
that allows all your users permissions from the parent folder. Then add the
individuals (or security group containing the individuals) to the permissions
and be sure to give them change permissions. If they are opening files from
this folder or subfolders, they must have the ability to create, edit and
delete files in the folder. Check the box to replace permissions on child
objects and go for it. Don't forget to retain your administrators group's
Full Control permissions as well or you won't be able to administer the
folders.

Let us know how it goes.

 

[Guest]

When trying to replace permissions on all child objects, I get tons of Access
is Denied messages. I can't copy the file, move it, open it, nothing...

I don't quite understand this one... Any other ideas?

 

[Guest]

Are you logged in as a domain administrator account? Sounds like when you
turned off inheritance you removed permissions for whatever user account you
are attempting to make the changes with. Also, be sure there are no Deny
permissions set at any level. Deny takes precedence over any allow. You may
have to go folder by folder until you find where the bad or missing
permissions are then use an account that does have authority (like the local
admin or builtin domain admin) to reset.