Lost permissions in Public Folder

From: Rob Girard (robg-technet_at_stpaulguarantee.com)
Date: 02/05/04 

Date: Thu, 5 Feb 2004 07:11:10 -0800

I too am having the same problem. I have followed these
steps and then some. I have determined that ownership of
the items belongs to the person that posted it
(regardless of taking ownership of the folder).

I tried taking ownership of all the objects within the
folder through Windows Explorer on the Owner tab by
selecting "Replace owner on subcontainers and objects".
When I click OK, a box pops up and starts running through
all of the objects. When an object is encountered that I
do not have permission to (ACCESS DENIED), I click
continue and it keeps running through the rest of the
items until it hits another ACCESS DENIED. Repeat.

The behaviour is the same when I'm setting permissions
with the "Replace permission entries on all child objects
with entries show here that apply to child objects".

Since the public folder I'm working with belongs to a
relatively small department, which happens to be Systems,
I decided to use administator to give Full Control to the
department using CACLS. At a command prompt, I navigate
to "M:\organization.com\public folders\systems\server
log" (the problem folder). I type:

cacls *.* /C /G ADMINS:F

Here's where it gets interesting. Administrator runs
through and gets a lot of items, but not all of them.
Since I am in the "ADMINS" group, I log on to a command
prompt using "Run As" and run the same CACLS. There are
items in the folder that I posted that the administrator
did not have the power to adjust permissions on. Now that
I've run CACLS, ADMINS now has Full Control rights on
even more objects (administrator's + mine).

I repeated this by having the others in the department
log on and run the same CACLS command on against the
public folder. I end up now having control of about %90
of all the items. From here, I can adjust the permissions
back to administrator, follow article Q270905, and then
control them through ESM.

What about the other 10% of the objects in the folder?
These are entries written by staff members no longer
working here. Unfortunately their accounts are gone too.

There has to be an easier method. Something silly that
I'm missing. Why can't administrator regain control of
the items? Since this is a public folder, it is not
behaving the same way a regular folder would on an NTFS
partition.

Any suggestions? This is really driving me crazy! Thank
you!

Rob Girard

PS- Henrik, does this scenario match yours?

>-----Original Message-----
>I have lost permissions on some files in an Public
Folder.
>Due to previous permission problems I followed the
Knowledge Base
>Article 270905 and did a reset of the permissions to
handle these via
>the Exchange Manager.
>
>After resetting the permissions and inherited them from
the top folder
>(with default permissions) I opened the folder in MS
Outlook and could
>only see some of the objects. The rest of the objects
was greyed out and
>presented with an error message if you click on them.
>
>I looked in the file explorer on "m:\" again to se if
there still was
>some settings I missed on these objcts, but I could not
retreive any
>information at all on the objects.
>The server said: "You do not have permissions to view or
edit the
>current permission settings...."
>
>Because of this these objects are not shown in the
Outlook folder and I
>cannot change the permission settings on m:\ on file
level.
>
>If I look at the folder permissions settings I have
inherited the
>permissons so the objects should be possible to read,
but they are not...
>
>So what I need to know is how to get permissions for the
objects that is
>greyed out in Outlook and not workable on the server. I
can not take
>ownership on them, because the server dispalys an error
message. But the
>administrator (as I am logged in with) is owner of the
folder.
>
>regards Henrik Persson
>
>.
>

Relevant Pages

  • RE: Repair Re-install Goof Up?- Need Help
    ... How to take ownership of a folder ... In the Name list, click your user name, or click Administrator if you ... Do you want to replace the directory permissions with permissions ...
    (microsoft.public.windowsxp.general)
  • RE: transfering data
    ... Attempt to take ownership of all the old folders / files, ... 1.Right-click the folder that you want to take ownership of, ... 4.In the Name list, click your user name, or click Administrator if you are ... you want to replace the directory permissions with permissions granting you ...
    (microsoft.public.windowsxp.help_and_support)
  • RE: Unable to access files
    ... Right-click the folder that you want to take ownership of, ... In the Name list, click your user name, or click Administrator if you are ... > you want to replace the directory permissions with permissions granting you ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: User Account Suddenly Unaccessable
    ... Revert to the original profile folder. ... Log on as administrator ... The Sharing tab has "Do not share this folder" checked, and the rest of the tab has no data. ... In the middle section none of the "permissions" categories have any checkmarks - no marks in allow, ...
    (microsoft.public.win2000.general)
  • Re: Do not have accessibility to change certain file names
    ... ownership and permissions supersede administrator rights. ... you can set XP Home permissions in Safe Mode. ... Open Explorer, go to Tools and Folder Options, on the view tab, scroll to ...
    (microsoft.public.windowsxp.accessibility)