Permissions Problem

[nevets2001uk]

A slightly complex story but we have a shared folder on one of our servers to which everyone has full control (share permissions) and a group named Doc Archives has read permissions (NTFS). This folder has a number of sub-folders each of which has PDF's created in them by an application running on the server (Streamserve).

Until recently there have been no issues with this and all new files have been accessible to the members of the Doc Archives group. However recently new files are being created but arn't inheriting the permissions. Only Admins and System are given access. If I manually create a new document in the directory it does inherit the correct permissions. So it seems to be something to do with the auto generated files but nothing has changed on the software so I can't work out the problem.

The only other change is that we recently added this server to a domain. Currently file access is still granted to local users and groups until we have created the correct groups in AD. I am starting to wonder if this is the issue. Could it affect local permissions?

Steve G (MCSE / MCSA:Messaging)

 

[AaronBeau]

Just a shot in the dark.....but did you try unchecking Inherit permissions and then rechecking Inherit permissions.

When the new files are created, are the permissions any different from before? Who is the owner of the file?

Does each subfolder have inherit permissions checked?

 

[nevets2001uk]

Thanks for the suggestion.

I've checked inherit permissions is turned on for all subfolders and also for each of files that gets created. They inherit the Administraors and SYSTEM accounts from the top level drive but for some reason not the Group permissions from their parent. If I check the replace child permissions option and allow that to run they get the correct permissions, it just doesn't seem to happen on creation.

Steve G (MCSE / MCSA:Messaging)

 

[nevets2001uk]

This is still an issue for us and after some more digging I discovered it seems to be a problem with inheritance from the share level down only. Our structure is as follows...

D:\
D:\Comp
D:\Comp\docarchive (Shared - Everyone Full Control)
D:\Comp\docarchive\orders

New files created by the software in D:\Comp\docarchive\orders inherit any permissions assigned to either the root of D: or D:\Comp but not those assigned to docarchive and below.

Any further thoughts would be much appreciated.



Steve G (MCSE / MCSA:Messaging)

 

[theravager]

The shared permissions won't affect anything so you can disregard them.

Its possible something to do with what account the application is using to create the files. Try checking out what the owner of the files that aren't working are.

 

[nevets2001uk]

Thanks. I've since elevated the application services to run as a domain admin user and still no joy.

All files (working and not working are owned by the local Administrators group).

Steve G (MCSE / MCSA:Messaging)

 

[theravager]

Download setacl and dump a list of the permissions. It should turn up whats going wrong somewhere.