Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Personal Context: I am tech savvy, but in a dev sort of way, weak on the admin side. Apologies for missing details.

I have a virtual server running Windows Server 2003 R2. I have sshd running via cygwin. I have a directory (itself containing many nested directories) that I want to set up so that a particular user group will always have full control over any of the files within, irrespective of the individual file permissions, but I do not want to make the the users Administrators. The access is likely to be via sftp/ssh but I think that will be handled automatically as long as the file system permissions are correct. I have tried giving access at the top level folder to the group and even doing the "replace all child permissions" option, but this only handles it for the files currently present and not for new ones (and caused issues of it's own).

If this is something far easier to deal with in Server 2008 that is good information as we are likely to be migrating in coming months.

Thanks, Matthew

share|improve this question

"Replace all child permissions..." is a 'one off' task. What you may find is that one of the subfolders is not configured to "Include inheritable permissions from this object's parent"

So, ensure your user group is configured to have "Full Control" over the top directory, and then in all subsequent directories ensure that "Include inheritable permissions from this object's parent" is checked. This can be found under "Advanced" while in the Folder Security tab.

Although things have been moved round slightly in Server 2008, permissions work in the same way.

share|improve this answer
I just took a look at a directory we had an insufficient permissions issue in; the directory is getting the Full Control permission inherited down, but when I look at the Effective Permissions of a specific file in the directory those permissions are not present. – Matthew Nichols Dec 9 '11 at 13:46

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.