Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

"your users are out of order, click re-order to fix" - what exactly does this mean and why does it effect a programs ability to load?

OS: Windows 7 64 bit ultimate edition

What does it mean when right-clicking on a file and clicking on security you see a message that says this "your users are out of order, click re-order to fix".

What exactly does it mean that users are out of order and how could this prevent a program from working properly? Please let me know if you need more info to answer this and I will provide it.

Thank you

share|improve this question
Can you give a screenshot of this message? (If you punch "click re-order to fix" into Google, this question is the only hit. So I'm suspecting you either have some very unusual software installed or are misreading/miscopying the message.) – David Schwartz Apr 27 '12 at 21:15
The order of user list entries is not relevant to SAM resolution or the ACL. Also, I have never heard of this message. – Falcon Momot Apr 27 '12 at 21:30
up vote 4 down vote accepted

Windows ACLs are applied in a certain order to be effective. Back in the WinNT and Windows 2000 days, the command-line utilities to modify file-permissions could cause problems if you blindly added/removed things. For example, if you were granting a group Modify permissions when they'd previously been granted R/O, it would add a second ACL with Modify and the ACL list would still have both.

They've since fixed this in the command-line utilities. However, this means that the various other utilities over the years have had to be modified to handle the old-broken behavior, and that's the dialog you see when you encounter it.

It is safe to click 'Fix'.

share|improve this answer
Thanks! This makes perfect sense. I didn't mention it but users were given permissions via a script which used command line but in the same way as win xp. That must have done it. Thanks! – Patrick Apr 28 '12 at 2:21

It means that the people using the system are not behaving correctly (usually with issues like PEBKAC, ID-10t or layer 8 failures). These users are often not salvageable, and so you need to order new users from Microsoft to replace them in order to remove the errors and restore normal operation. Disposing of the old users can be a hassle however, since they do not have self-shutdown functionality. RFC1097 can be useful if the interface protocol is telnet, but this isn't usually the case nowadays. One often has to resort to bruteforce methods, but RFC3251 can be used to perform this remotely which helps to avoid the mess.

share|improve this answer
I have to admit... I couldn't stop smiling after this answer – Patrick Apr 28 '12 at 2:19

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.