Remove Deny Permission on NTFS Folders
I have a Windows 2003 Server with a temporary shared folder. Users can create and copy files to this folder, but these folders are deleted every night by me. They also can change permissions to other users access these files. But I have one problem: some
users Deny the Administrators permissions on these folders and I could not delete them at night. I could take ownership then delete them but it takes more manual work. Is there some way to remove Deny permission on this folder to all users ?
September 16th, 2011 1:21pm
Hi,
I am afraid that there is no easy way to achieve your goal.
To do so, you may write a script to take ownership and change the permissions of these files in the temporary shared folder. For more information, please
refer to the following Microsoft TechNet article:
Takeown
http://technet.microsoft.com/en-us/library/cc753024(WS.10).aspx
Cacls: Displays and Modifies NTFS Access Control Lists
http://technet.microsoft.com/en-us/library/cc976803.aspx
If you encounter any difficulties when customizing the scripts, you may submit a new question in The Official Scripting Guys Forum! which is a best resource
for scripting related issues.
The Official Scripting Guys Forum!
http://social.technet.microsoft.com/Forums/en/ITCG/threads
After that, you may create a task scheduler to run the script every day at a time before deleting them. Maybe, you may also delete them by using a task
scheduler to run the script.
For more information, please refer to the following Microsoft TechNet article:
Schedule Tasks
http://technet.microsoft.com/en-us/library/cc758399(WS.10).aspx
Regards,
Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
September 16th, 2011 9:51pm
Make sure users are not assigned Full Control permission for that folder. The maximum allowed for users should be Modify, which is Read+Write+Delete. Full Control also includes PermissionChange, this permission should never be assigned until you really
know you want it.MCITP: Enterprise Administrator; MCT; Microsoft Security Trusted Advisor; CCNA; CCSI
September 20th, 2011 8:54am
Perfect.
I was using only Xcalcs but the recursive mode was not efficient.
With Takeown everything is working good.
Free Windows Admin Tool Kit Click here and download it now
September 20th, 2011 3:32pm


