Permissions Problems

[site4sure]

Here is the deal:

I had a Windows 2K Server with a second drive, Data. On there was all our coporate info, in two directories. We have since got a Dell NAS with Window 2003 Application Server I believe on it. We set up users on the NAS same was as we did on the 2k box, copied everything over and now we are having permissions problems like hell. Everything is setup identically. I can open a docoument say Inventory, make changes, File, Save and I get access denied. If I go to save as, it works. Any ideas? Every once and a while, Outlook quits, each users outlook file is on the server and QB quits with a network error etc. We know its not the cabling etc or the wireless, something with the permissions. Also, made everyone a administrator or put them in the group, same troubles. Any ideas?

 

[BrainSurgery]

When you copy files/folders from one server to another, the permissions of those files/folders are replaced with the permissions of the target server.

So you need to give the appropriate permissions to the files and folders once more to get it working alright.

One more thing: If your old Windows 2k server and the new Dell NAS server is not a member of a domain, and it is not the domain users you are setting up on the NAS-server, then you will have two different sets of users and groups (because of different GUIDS).

The local user "Tom" on Win2k server will not be the same user as the local user "Tom" on the NAS-server.

 

[site4sure]

Hi,

Well we resetup the permissions on the NAS and things are really goofy. I get access denied a lot from just saving a file that I opened on the server that is mine and occassionally quickbooks quits on me and just a bunch of weird stuff. If you want to know more details let me know and I will post them. We are just trying to get it solved because it is annoying saving a spreadsheet and getting access denied.

 

[schnook9]

What are the permissions on the file you are trying to access? Are you inheriting permsissions? What are the permissions on the directory the file is in?
If you could list out the specific permssions, all the groups/users and the specific permission level for each group, there could be something off there.

 

[site4sure]

Hi,

Is there an easy way to have windows hash out the permissions in a text file so I can post them>?

 

[markdmac]

Want to add my 2 cents on the Outlook problem as that raises a big red flag for me.

I am guessing that you are just using POP mail and not Exchange?

Configure your workstations to have the PST file be LOCAL to the machine. Download and install on each workstation the PST Backup utility and have it copy the file over to the NAS when the user exits Outlook.

This download works with Outlook 2000, XP & 2003

http://www.microsoft.com/downloads/...3A-B7D0-4B16-B8AF-5A6322F4FD01&displaylang=en

I hope you find this post helpful. Please let me know if it was.

Regards,

Mark

 

[schnook9]

site4sure,

you can print the commands to a file by executing the following at the prompt:

cacls <pathname> >outputfile

the full options available for cacls...

CACLS pathname [options]
key
options can be any combination of:

/T Search the pathname including all subfolders.
/E Edit ACL (leave existing rights unchanged)
/C Continue on access denied errors.
/G userermission
Grant access rights, permision can be:
R Read
C Change (write)
F Full control
/R user
Revoke specified user's access rights (only valid with /E).
/P userermission
Replace access rights, permission can be:
N None
R Read
C Change (write)
F Full control
/D user Deny specified user access.
In all the options above "user" can be an NT Username or an NT Workgroup (either local or global)
If a username or groupname includes spaces then it must be surrounded with quotes e.g. "Authenticated Users"
If no options are specified CACLS will display the ACLs for the file(s)

 

[BrainSurgery]

Site4Sure:
This sounds like missing permissions. Even the administrator of a system can be denied access to a file or folder, so there is nothing strange about this.

Solution:
Go to the root folder on your disk system and take ownership of everything beneath it.

Rightclick folder -> properties -> security -> advanced -> owner -> make sure your username (preferable a user with admin rights are selected) and mark the "Replace owner on subcontainers and objects" and then click apply and ok.

Next step:
From the root folder:
Rightclick folder -> properties -> security -> advanced -> add (you should now be able to add your username to the list of users and give your username the full control right over the folder and its subcontent) -> mark the "Replace permission entries on all child objects .. " thing and click apply and ok.

If this is not working you should consider turning of inheritage of rights, if that one is marked.

Now you should be able to work your way through the material and give the proper rights to the user and groups who needs it (preferable still on folder level).

Give it a try and let me now the result

 

[Shekinah]

I agree brain. The first step is to take ownership. If you are not the owner - it doesn't matter what rights you think you are assigning. Good post and reminder for us all.

 

[site4sure]

Hi Guys,

Been real busy with work and havent had time to read the entire forum and try some stuff out. I will this weekend though and then I'll let you know how it turns out. Right now I just copy stuff from the server to my desktop, work on it and then copy it back. It's annoying, but it works for now.

 

[site4sure]

Hey Guys,

Get this. I got a phone call from DELL and apparently the server and the rails thy sent us, has a fault in it, where it could snap from the rails and fall to the floor, which wouldn't be the highlight of my day if that happened. So, they are going to ship us a brand new one. I will then reset it up, move the data etc and see if I have the same problems. Here is a dumb question though, permissions do NOT copy across the network from one computer or server to another. So if i was to move my entire data directory to the new server, the permissions should not come with it right?

 

[markdmac]

If you do a copy to another server the files will inherrit the permisions of the folder you move them to.

I hope you find this post helpful. Please let me know if it was.

Regards,

Mark

 

[site4sure]

Hi,

I am confused on what you mean. Can you help. This might be my problem of copying things around and it keeping the permissions. I really want to start from scratch with the permissions and make them easier.

-Chris

 

[markdmac]

You need to figure out how you would like the permissions to end up. On the new server, create a folder. Set the permissions on that folder the way you want the rest of the data to be setup. Copy the data to that folder. The data will inherrit the permissions of the folder you set up.

I hope you find this post helpful. Please let me know if it was.

Regards,

Mark

 

[site4sure]

Hi,

Still have a question. What about folders under the "Data" folder. I really just want Admin on everything. I have al ot of trust in my employees and most of them wouldnt know what ot change or delete anyway. What do you think?

We have three folders. One has stuff we use on the network like RPM packages for linux etc. One has S4S company data, websites, docs etc. and the same for the VWN folder.

 

[markdmac]

You could set Full Permissions for the group Domain Users if you wanted everyone to have rights. I would NOT do this for the web files. Lock that down tight as there are too many exploits for webs. It isn't your employees you need to worry about it is the viruses and hackers that are the bigger concern.

Overall however I would suggest that you figure out what your employees NEED to do their job and only give those permissions.

I hope you find this post helpful. Please let me know if it was.

Regards,

Mark

 

[site4sure]

Hi,

Thanks for the info. As soon as I get the new NAS and get it set up which I am dreading, I'll let you know how it turns out or if I have any problem.

 

[schnook9]

site4sure,

If you want to make sure you keep your permissions as you copy, try using the 'xcopy' command from the Command line. Using the /O option will include the ownership and ACL info.
HTH.