Tuesday, July 19, 2011

Windows Server 2008 Folder permissions

I've noticed a few times in the past year or so, when reviewing folder permissions on some clients Windows Server 2008 servers, that the Administrators group will have Full permissions to folders in the root directory of a drive, but the sub-folders are missing the Administrators group.  This seemed rather strange... the only way to correct it seemed to be to manually add the Administrators group to the next sub-folder levels. 
However, I've found what caused it! 
  1. If you right click the drive that you need to provide permission to and select properties...
  2. Select the Security tab
  3. Click Advanced
  4. Click Change Permissions
  5. Select the group that needs to be changed (in this example, the administrators group)
  6. Click Edit
  7. Note the tick box at the bottom... 'Apply these permissions to objects and/or containers within this container only'.  Untick this option
  8. Click OK to save out of the various screens.  You may have to tick the box to 'Replace all child object permissions with inheritable permissions from this object' so that the new permissions flow down to the sub-folders. 
So, another odd little problem solved!