Windows – Domain Admin can not take ownership of files

file-permissionswindows

I have a very strange issue where a domain admin can not see the permissions of a file i.e. has no read permissions. This means I can not use takeown or icacls (even running as administrator) to alter permissions and ownership because access is always denied.

File Permissions

Having looked at google I can not see a way round this issue, any suggestions are very welcome

Best Answer

so I know this was asked a long time ago, but I had the exact same issue. I found that clearing the open files within compmgmt.msc > Shared Folders > Open Files for the affect folder(s) resolved the issue.

Related Solutions

Windows – Force ownership of folder structure without replacing other permissions – Windows Server 2008 R2 – takeown is erasing all other permissions

Ended up achieving what I wanted with Setacl. I wrote the following script which ripped through the entire folder structure and files, and gave ownership to the local Administrators group, then went through again and added a full control ACE for our IT domain group. It did this without replacing or removing the existing permissions/ACEs (other than replacing the owner), and I didn't get any access denied errors:

setlocal

set logDir=%1
set targetDir=%2
set logFileName=%~n2
set logFileNameEnding=%3

SetACL.exe -on %targetDir% -ot file -actn setowner -ownr "n:S-1-5-32-544;s:y" -rec cont_obj -log "%logDir%\%logFileName%-TAKEOWN-%LogFileNameEnding%.txt" -silent

SetACL.exe -on %targetDir% -ot file -actn ace -ace "n:domain\group;p:full;s:n;m:set;w:dacl" -rec cont_obj -log "%logDir%\%logFileName%-ADD-DOMAIN-GROUP-%LogFileNameEnding%.txt" -silent

endlocal

Windows – Domain Admin has no permissions to copy files onto domain share

So, if I share a folder on the DC (Server1) and set the permissions to allow full access for "Everyone", I cannot copy files onto this share from my Windows 7 Workgroup computer

Judging by your comments, it seems that you've only set the NTFS permissions, but probably are using the default Sharing permissions, which are read-only. What you need to do is go into the Share Properties for that share and set the appropriate permissions. It's located in the Sharing tab, next to Security in the Properties window.

Generally, I grant Everyone Full Control in the share permissions and control access through NTFS ACLs. It's much easier to manage that way.

Best Answer

Related Solutions

Windows – Force ownership of folder structure without replacing other permissions – Windows Server 2008 R2 – takeown is erasing all other permissions

Windows – Domain Admin has no permissions to copy files onto domain share

Related Topic