Remove Deny Permission on NTFS Folders
I have a Windows 2003 Server with a temporary shared folder. Users can create and copy files to this folder, but these folders are deleted every night by me. They also can change permissions to other users access these files. But I have one problem: some users Deny the Administrators permissions on these folders and I could not delete them at night. I could take ownership then delete them but it takes more manual work. Is there some way to remove Deny permission on this folder to all users ?
September 16th, 2011 1:21pm

Hi, I am afraid that there is no easy way to achieve your goal. To do so, you may write a script to take ownership and change the permissions of these files in the temporary shared folder. For more information, please refer to the following Microsoft TechNet article: Takeown http://technet.microsoft.com/en-us/library/cc753024(WS.10).aspx Cacls: Displays and Modifies NTFS Access Control Lists http://technet.microsoft.com/en-us/library/cc976803.aspx If you encounter any difficulties when customizing the scripts, you may submit a new question in The Official Scripting Guys Forum! which is a best resource for scripting related issues. The Official Scripting Guys Forum! http://social.technet.microsoft.com/Forums/en/ITCG/threads After that, you may create a task scheduler to run the script every day at a time before deleting them. Maybe, you may also delete them by using a task scheduler to run the script. For more information, please refer to the following Microsoft TechNet article: Schedule Tasks http://technet.microsoft.com/en-us/library/cc758399(WS.10).aspx Regards, Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
September 16th, 2011 9:51pm

Make sure users are not assigned Full Control permission for that folder. The maximum allowed for users should be Modify, which is Read+Write+Delete. Full Control also includes PermissionChange, this permission should never be assigned until you really know you want it.MCITP: Enterprise Administrator; MCT; Microsoft Security Trusted Advisor; CCNA; CCSI
September 20th, 2011 8:54am

Perfect. I was using only Xcalcs but the recursive mode was not efficient. With Takeown everything is working good.
Free Windows Admin Tool Kit Click here and download it now
September 20th, 2011 3:32pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics