NTFS security LOST!

[jfc1003]

We bounced a server this morning and it went into a chkdsk at reboot. I walked away from the screen and when I came back it was running all of this stuff on the screen saying:


Deleting an index entry with Id 261 from index $SDH of file 9
Deleting an index entry with Id 262 from index $SDH of file 9
Deleting an index entry with Id 263 from index $SDH of file 9
Deleting an index entry with Id 264 from index $SDH of file 9
etc......

We rebooted and the server came up saying the f:\$secure was corrupted.

KB Article 873437 shows the weird chkdsk entries as an issue with a hotfix. So we ran the hot fix and rebooted at which point the server came back on line, but the secondary drive lost all of it's NTFS security. Shares are there, but if you go into any file there is no security. It just shows the Administrator user and System user and all checkmarks are unchecked. And we can not write to the drive. Even after I reset the Administrative to full rights. A chkdsk /f fixed errors, so now we can write, but still no security. This drive has a whole bunch of shares with very individualized security settings for each. Resetting them all is nearly an insurmountable task.

We have a full, successful back up from last night, but I am not sure that will accomplish anything. What file stores the NTFS security attributes? Can I just restore that file?

Help!

 

[WhoKilledKenny]

Your backup should restore the NTFS permissions as they are at the file level, I say should because you did not mention what type of backup solution you are using.

Your share permissions are at the OS level, so if those got messed up it's a do over - Manual reset.

Good luck...

 

[jfc1003]

Our software is EMC Retrospect. It took us a while, we learned a lot, but EMC did it's job and the entire drive came back to exactly how it was. There are also some tricks we learned for future with EMC that will allow us to restore just security settings.

Thanks for your post. All is well again, and I am a little more gray, but a little more wiser as well.

 

[jfc1003]

And Tired, because my grammar needs work....