NTFS Permissions return to default upon server reboot

[Guest]

I hope somebody can help with this question. I can't find anything on it
anywhere. I have three servers with a shared folder on them. I have
configured share and NTFS permissions on the folder for groups and users.
When the servers reboot the share permissions remain the same but the NTFS
permissions always go back to the default permissions. All the groups and
users I have given access to the folder are lost! They are windows 2000
servers with current service packs and security updates.

 

[Roger Abell [MVP]]

I hope somebody can help with this question. I can't find anything on it
anywhere. I have three servers with a shared folder on them. I have
configured share and NTFS permissions on the folder for groups and users.
When the servers reboot the share permissions remain the same but the NTFS
permissions always go back to the default permissions. All the groups and
users I have given access to the folder are lost! They are windows 2000
servers with current service packs and security updates.

Malware/infection aside, this behavior only happens in Windows if
something has been set up to do this (perhaps set up by something that
was installed and so unnoticed at the time, but that is rare).

What is the area? I mean is it just c:\somethingcustom or is it down
within a predefined directory?

Check what GPOs apply and whether any contain filesystem definitions,
particularly for the root or a parent of the root of the area impacted.
Look at any startup/shutdown scripts.

You could try placing an audit on one or more of the files for
success/fail of permissions change. You would at least catch
the time and the account used.

Roger