Win Server 2003 : File Structure

[TiziteLayinLow]

OK so one of the shares on the domain controller has been modified from a user. I first thought the folder was encrypted because it says access is denied from within the admin account.

I thought if the folder was encrypted that it would be in green font?? maybe im wrong.

Is there anyway to find the owner if it is encrypted so I can login the AD under that account and take it off..

Do you guys know of any other reason this could be giving this error???


Thanks,
Matt

 

[stash]

Have you checked the NTFS permissions? Don't forget ownership as well.

 

[RebateMonger]

Even if it's EFS, by default, the Domain Administrator can recover the file.
The only other possibility is NTFS Security Permisions. An Administrator can take ownership of the file and change the access rights.

 

[TiziteLayinLow]

well when i go threw explorer and right click the share... i dont even have the options for "sharing and security" .... the properties show no bytes.. 0 files, try to open and access is denied.

this is actually consoled at the server itself under the admin account.

is there a reason why i cannot access this?

thanks,

matt

EDIT:

basically what I'm doing.. my company picked up a new client and their network is a mess.. we are tryin to keep it up and running and hopefully start from scratch on the project... but anyways.. i noticed theres about 100 users in the AD that I cannot account for.. seeing as though there is no documentation for this network at all.. if i just use the event viewer to see the security tab for logins for these 100 accounts will that also show me if there is any applications using those accounts?

also he added an additional admin account - if i simply delete this account and go back to the administrator account.. only thing i loose is the profile for the admin account he created? should i be looking anywhere else for dependancies on this account?

thanks everyone..

 

[RebateMonger]

Go up one folder level and change the permissions there. Tell Windows to flow the new ownership and permissions DOWNWARD to the folders/files that you're having problems with. After doing that, you'll have to LOG OFF and log back in again for your new ownership and rights to take effect.

 

[TiziteLayinLow]

will changing the ownership on all the other subfolders/files change the way that the users who originally had the ownership effect the way they can access those?

thanks

 

[Smilin]

Originally posted by: RebateMonger
Go up one folder level and change the permissions there. Tell Windows to flow the new ownership and permissions DOWNWARD to the folders/files that you're having problems with. After doing that, you'll have to LOG OFF and log back in again for your new ownership and rights to take effect.

you shouldn't have to log off. Thats only when your user account itself has been modified (added to group etc).

 

[RebateMonger]

Originally posted by: Smilin
you shouldn't have to log off. Thats only when your user account itself has been modified (added to group etc).

Well....I agree with you...however, I was trying to delete an empty folder in XP Professional last night, and, even as both Local and Domain Admin, I was being refused. I made sure that I was the Owner of the folder and that I had Full Control of the folder immediately above it, and that the new rights were propagated to the folder I couldn't delete.

It was driving me CRAZY. I wanted to install a new program that needed to write to the pre-existing folder, and it wouldn't let me finish the install, even with full Local and Domain Admin rights.

Then I logged off. Logged back on, and....deleted the folder.
Like I said, I agree with you....but....it never hurts to log off.

 

[TiziteLayinLow]

Originally posted by: RebateMonger
Go up one folder level and change the permissions there. Tell Windows to flow the new ownership and permissions DOWNWARD to the folders/files that you're having problems with. After doing that, you'll have to LOG OFF and log back in again for your new ownership and rights to take effect.

This domain has about 200 users.. their file structure is..

c:\companystuffxxx\documents\lockedfolder

If I change the ownership of documents.. thats going to be about 5gb of documents that 200 users will now see as me the owner..

will this matter to those users?

I cannot have them not being able to access their files in a work enviroment of a doctors office (2 location wan)..


thanks,
matt