fix fouled up permissions?

[Guest]

In a user's home directory, there is a folder that has become unaccessible.
The permissions for all folders in her home directory should read Admins:Full
Control and User:Full Control, all inherited from the parent. This one reads
Admins:Read&Execute (no write, no delete), inherited from the parent (but
that's not the parent's permissions). Because of this, the user can't read
the folder, and I can't change the permissions. Is there any way, any
utility or registry hack, to override those permissions so I can reset them
to the way they should be?

 

[kevin Merrick]

Ummm, Is there a reason that you want to do this through the registry...?

Sounds like your user was playing with their permissions settings. They
probably explicitly set their own permissions. Either they were playing
around or they were trying to restrict someone elses access to their folder.

You could just go to the properties window on the affected folder, click
advanced, select the Owner Tab and then take ownership of the folder. (you
may need to check the "Replace owner on sub containers and objects" box, if
the users folder has a number of sub folders all inheriting the same messed
up permissions.) OK your way out, reopen the permissions page, give Domain
Admin" Full Control to the folder. (Or use the "Local Admin" account for
the server) Ok your way out again, reopen Permissions page and then apply
whatever permissions that you like, ensuring that the "Allow inherited
permissions from parent to proagate to this object" check box is checked.

This only works if you are some type of Local or Domain Admin or if you have
permission to Take Ownership. You might want to lock down this users access
to Modify. Just to avoid further permissions issues. Users with a little
knowledge can get pretty disruptive.

Hope this helps.

Sorry to waste your time if this is not what you wanted to know.

 

[Guest]

Thanks - I remembered the "take ownership" thing about 10 minutes after I
posted. I didn't want to do it through the registry, but I was grasping at
straws at the time.