W2k3 FILE Permissions lost !!! How ?

[aleonhardt]

Hi all,

I've got a serious problem/concern here .. it seems that since a few days - probably after an automatic MS update - permissions for Folders / Files / etc. are just gone.

Any hint on this ?

Thanks!
Alex

 

[pinkpanther56]

Is this on the system volume (C or another? It would be unlikly for it to be an update.

 

[aleonhardt]

Hi,

no it's randomly .. especially shared and system files ..

Alex

 

[pinkpanther56]

Does anyone else have access to the server that could of accidentally set the permissions and set it to change permissions for all sub folders and files?

 

[aleonhardt]

Hi - no only 2 people have access and they didn't delete the permissions ... fact is that the permissions are just gone .. no owner is set and you've go through all files individually to set the owner to Admin .. after this, the permissions are suddenly back as they were before ...

Anybody seen that before ???

Thanks
Alex

 

[pinkpanther56]

Oh no idea then, i've never seen that.

It might be worth running a virus scan though.

 

[Daveyd123]

Wow...I have posted a question similar to this one and have not gotten any working responses.

I have a shared folder that has multiple docs in it. If I set the NTFS file permissions on a doc in the shared folder...the file will lose its permissions once the doc is opened, edited and resaved....the doc will go back to the default permissions inheriting from the parent (which I unchecked previously)and lose its own file permissions

 

[aleonhardt]

I guess that's exactly what's happening here as well... but could also be affected by a backup as a remote agent is using the Admin Logon Account to backup the files (and is opening/reading/accessing them therefore) ...

I haven't found anything from Microsoft or on Google that would refer to the same...

Alex

 

[Daveyd123]

I actually witnessed it. On a doc's file permissions, I had it set to Finance (Modify) Domain Admins (Full), System (Full) and User1 (Read only)...all not inheriting from parent

I told a member of the Finance Group to go into the folder, open the word doc, make a change then resave it. As soon as that happened, User1's file permissions disappeared and it defaulted to inheriting from parent


Weird, wild stuff

 

[aleonhardt]

Anybody an Idea to fix this ? Any patch / hotfix etc ?

Alex

 

[cozerdag]

We had a similar problem after a software installation and reboot. But in our case all permissions were lost apart from users having Admin accounts. (In fact users were not able to authenticate at all)

The following fixed our problem.

http://support.microsoft.com/default.aspx?scid=kb;en-us;829082

 

[aleonhardt]

Hi,

thanks for this .. the affected server is "unfortunately" or "luckily" a Windows 2000 Server.

I'll call Microsoft and see if they know a fix or at least the cause of this problems...

Alex

 

[aleonhardt]

Sorry for the confusion - thought first it's a problem with the W2k3 server ...

Alex

 

[Daveyd123]

Any solutions?

 

[Daveyd123]

no one?

 

[aleonhardt]

Hi !

No, no "real" solution - just a "work around" .. I found a tool to re-set all owner settings so that the files get their permissions back.

I left for holiday and need to find out if other engineers found a fix ...

Alex

 

[technome]

Similiar problem after June's patching. Since the servers involved were really basic, with only a few users, I imported the default DC security template. This issue was compounded by the patches making changes to the SMB signing parameters, which I manually adjusted at the server (I wanted SMB signing to be disabled).

........................................
Chernobyl disaster..a must see pictorial

http://www.kiddofspeed.com/default.htm

 

[aleonhardt]

So, that indicates that this problems are caused by M$ updates?

 

[technome]

In my case, 100%, but I also had adjusted SMB signing parameters, so I assume one of the patches adjusted one of the settings. For the last 5 months, every time I do the patching at client's, something does not work. In June, after the patching, I had two Wk2003 servers lose the ability to get into group policies...spent a couple of hours to fix it.
Two times the patch problems were minor, did nothing, the next month's patches corrected the problems.

........................................
Chernobyl disaster..a must see pictorial

http://www.kiddofspeed.com/default.htm

 

[aleonhardt]

Hmmmm... maybe I should just wait for another update/patch?? Well, after all this I really lost trust into MS updates - SP usually work quite well but I think I'll disable all autom. updates and only install selected updates where necessary.

Thanks!
Alex