General discussion


Win2k Server permissions problem

By DaedalusMgmt ·

I have a client that is running a Win2k server. They recently installed a Buffalo Terastation NAS device that syncs with Active Directory for access to the share, etc. Everything seemed to be working fine but they wanted to add a specific user to access the share and that's where things seem to have gone astray.

The Administrator wasn't listed as having control of the folder, so the admin can't make any changes to the user/group list. Admin can't even forcibly take ownership for some reason - it acts like its doing it for a long time (lots of stuff flashes by in the screen, like its changing things) then gets to certain files and up pops an "Access Denied" message.

Anyone know of a way to force the bloody thing to submit to Admin control and change the permissions?


This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Comments

Collapse -

by ICB's corner In reply to Win2k Server permissions ...

You can force propagate parental rights to child objects or someone who have full control puts back administrator.

Collapse -

by curlergirl In reply to Win2k Server permissions ...

The reason it is failing is because it is finding some file somewhere in a subfolder that is owned by some user other than the Administrator, and has no permissions on it of any kind for the Administrator. In order to change permissions on a folder where the Administrator is not the owner and has no permissions, you have to take ownership first before you can change the permissions. If you can find the particular file or folder, you can take ownership of it individually.

Or, you can use a Win2K Resource Kit utility called SUBINACL to take ownership of everything below the root level (or a lower level if you can identify a starting point). Once you have the subinacl utility, run the following command:

subinacl /subdirectories [path of starting directory] /setowner=Administrator

The "/subdirectories" switch specifies to take ownership of all files in the current folder and all subfolders. For example, if I wanted to take ownership of the directly C:\Fred and everything under it, the command would be:

subinacl /subdirectories C:\Fred /setowner=domainname\user

Hope this helps!

Collapse -

by Blackcurrant In reply to Win2k Server permissions ...


This may not help you but this was my experience with a Buffalo device:

We bought a less powerful Buffalo storage device (a 256GB LinkStation) and encountered a similar problem. We discovered that we could not change any file attributes - specifically the archive attribute. We were trying to backup incrementally from it, and discovered that because the archive attribute could not be reset after the backup had taken place, a full backup was being performed every day.

I 'phoned their tech support and discovered that the Buffalo device runs a propietary Linux OS, and although it integrates into an Active Directory environment, that is all it does - it will be recognised and that seems to be it.

The user and group access control is all internal. We have to set up access on the device - you cannot use the AD username/password to control access or to change permissions. And we discovered that access control is flakey at best.

We ended up just using it as standard 'open' storage. We bought a professional NAS server instead that comes with Windows 2003 Storage Server OS, and everything is now sweet.

So, have you tried logging onto the device using the HTTP interface, rather than from a Windows client or server? After being locked out of some of our shares, logging into the device itself and removing the security was the only way to allow access again. Perhaps if you try removing all security locally, then re-applying it, you may fix it.

Good luck

Related Discussions

Related Forums