Well, I'm screwed

Phoenix15

Golden Member
Aug 9, 2001
1,587
3
81
ok, here's the deal. I have a USB enclosure with a 40 gig drive. THis morning I was attempting to limit access to it. I stupidly denied access to everyone. I then setup two accounts that had access to it. Both were set with full control. Now, I can't get into it!

I can open the drive and see the folders but when I try and open them I get "access is denied". I also can't change the security settings for the folders. The drive itself is set with me as a user with full rights, and it is set for the subfolder and files to inherit the rights, but obviously it's not. Is there any way to reset this?
 

PunDogg

Diamond Member
Jan 15, 2002
4,529
1
0
isn't there another forum for this???

sorry i have no idea how to fix your problem

Dogg
 

SagaLore

Elite Member
Dec 18, 2001
24,036
21
81
Absolutely. Since you're changing access rights, I'm going to assume it's using ntfs. First, check the Owner. If you're not the owner, take ownership. It's under properties, Security tab, Advanced button, Owner tab. Then go back to the Permissions tab, remove everything in the last, Add Everyone with Full Control. Then check "Replace permission entries on all child objects with entries shown here that apply to child objects". Click Apply.

That should fix it. Then you can try and restrict it again.
 

FoBoT

No Lifer
Apr 30, 2001
63,082
12
76
fobot.com
if you have rights to change the accounts, then just change them again
some of those devices have a "secret" button to reset them to the defaults, check your manual
 

SagaLore

Elite Member
Dec 18, 2001
24,036
21
81
Originally posted by: Phoenix15I stupidly denied access to everyone. I then setup two accounts that had access to it. Both were set with full control.

Oh and an explanation on using Deny.

Don't use it unless you know what you're doing.

Deny takes precidence over any Allow. So let's say you have a user named Joe Shmoe. He's in a group called My Group. Now I add My Group to the list and Deny all rights. Then I add Joe Schmoe. Joe is still denied, because he's in My Group. There is no way to order it so he has Allow rights after the group is denied.

So by setting Everyone to Deny, you literally Deny EVERYONE no matter what other accounts you add.
 

Phoenix15

Golden Member
Aug 9, 2001
1,587
3
81
Originally posted by: SagaLore
Originally posted by: Phoenix15I stupidly denied access to everyone. I then setup two accounts that had access to it. Both were set with full control.

Oh and an explanation on using Deny.

Don't use it unless you know what you're doing.

Deny takes precidence over any Allow. So let's say you have a user named Joe Shmoe. He's in a group called My Group. Now I add My Group to the list and Deny all rights. Then I add Joe Schmoe. Joe is still denied, because he's in My Group. There is no way to order it so he has Allow rights after the group is denied.

So by setting Everyone to Deny, you literally Deny EVERYONE no matter what other accounts you add.


I owe you a :beer:

I didn't know that Deny would take priority over allow. I just remembered the dollar sign trick, so I think I will use that and forget about limiting access. With it being a external drive I'll be moving it back and forth between two pc's on different domains and it would jsut be a pain. This way I can bring it to work and take it home and not have to worry about the ownership and access rights.

 

PingSpike

Lifer
Feb 25, 2004
21,749
584
126
I also went through some permissions growing pains a few weeks ago...I accidentally set all the company data to read only access to everyone but administrators. That was probably one of the stupidest things I've done, but easily fixed once I realized what was going on.
 

SagaLore

Elite Member
Dec 18, 2001
24,036
21
81
Originally posted by: Phoenix15With it being a external drive I'll be moving it back and forth between two pc's on different domains and it would jsut be a pain. This way I can bring it to work and take it home and not have to worry about the ownership and access rights.

If you're worried about securing it's contents, then encrypt and password protect it. All the NTFS permissions in the world, and I can still access all of your data using Knoppix.

http://www.magic2003.net/scrypt/index.htm

I think that's $25.

I'm sure there are free encryption softwares too, but don't have the time to do any intense searching.