4

Running Windows Small Business Server 2011

I have a file structure with a lot of sub folders (sometimes 5-6 levels deep). I have created access groups to grant access to my users, and also deny groups to deny access to others.

X Access & X Deny. These allow or deny access to a mapped network drive X:

On the server I put in the groups with Full Control Allow for X Access and Full Control Deny for X Deny, I also tick the box "Apple these permissions to objects and/or containers within this container only" and have ensured that "Apply to:" is "This folder, subfolders and files".

But for some reason the permissions will only apply to the next level of folders & files.

ex. structure:

X:

Folder 1

Folder 1a

Folder 2

Folder 2a

If I apply the permissions to X: it'll only go to Folder 1 & 2, not 1a and 2a, I then need to manually apply the permissions to these too.

Is this working as intended or am I doing something wrong?

1
  • It might be helpful if you posted the output of cacls directory for each directory.
    – Zoredache
    Sep 4, 2012 at 4:08

2 Answers 2

6

Depending on how you created your directory structure, you might have broken inheritance for some of your subdirectories. In this case, you should use the "reset permissions on all child objects and enable propagation" check box in the Advanced Access Control Settings dialog:

screenshot of the advanced access control settings

After doing this, you should see inheritance working again.

If you are not able to change ACLs due to permission restrictions, consider seizing ownership for X: and all files and subdirectories.

1
  • This somewhat was the issue. I needed to go and add the group to the permissions in the standard permissions box, then go into advanced and check "Reset permissions...".
    – Jovin J
    Sep 4, 2012 at 7:04
2

From the parent folder, Security Tab, "Advanced", highlight a user/group, "View/Edit" button. A dialog opens.

DO NOT TICK BOX for "Apply these permissions to objects and/or containers within this container only".

2
  • 1
    Where does this check box exist? Accepted answer shows solution. Can you add details to your answer?
    – Dave M
    Apr 2, 2014 at 21:31
  • @DaveM The check box is in the "Add permission" dialog. When you are adding the permissions. The option "Apply these permissions to ..." is actually "Do this recursively for all sub/sub/sub... folders". Instead of just the current folder. And it is negated. See technet.microsoft.com/en-us/library/cc771309.aspx The action in the other answer just resets this setting after the fact. Oct 3, 2021 at 9:52

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .