I have a combined Win2K, NT4 network. My file server is Win2K with Active Directory enabled.
I have a mapped drive on the server All users have read and list folder contents rights on the top level directory, and are then granted access to sub-directories on this mapped drive depending on group membership or individual rights.
I have a database developer who I have granted full rights to a directory. This is so he can assign rights to other users of sub-directories of this directory.
A couple of weeks ago the system decided to rescind his rights. If he right clicks on the directory and clicks on the Security tab, he gets a message that he is only able to view the rights, he cannot change them. When he views the rights he can see he has full access, but he is unable to grant other users rights, or change his own rights.
I created a new directory, turned off the option to inherit rights from the parent directory, and granted this user full rights again. However, he still cant get full rights. When I temporarily made him a member of the administrators group he had full access. All other users except this one person are denied access via the Everyone group.
Does anyone have any idea why this is happening? Why did it suddenly start happening. Is there a way I can grant this user the required access without making him a member of the administrators group?