Reset Windows 2008 NTFS default permissions
Hello, I need to restore Windows 2008 Server system files to their original default permissions. It appears permissions on the entire C drive where Windows is installed have been changed. My first clue was a backup failure when backing up the C drive. Also when I logon to the server as a Domain Admin; a pop up referencing the Recycle Bin warns of a corrupt Recycle Bin on C:. It asks if I want to empty the Recycle Bin for this drive? When I click Yes; It errors with "You need permission to perform this action". I've compared security setting on this server with another Windows 2008 server on the domain; and the permissions are very different.
November 9th, 2010 4:21pm

Hi, Is there any backup fail error message? Please share with us the backup failure so that we can do research on backup failure to identify if the issue is related to NTFS permissions, here you could look into Event Viewer, check Windows Backup event log to get more error logs. As I know, error corrupt recycle bin is related to NTFS permission on the drive. To resolve this problem, please log on with a local administrator account and empty the recycle bin for all users. If the issue persists, in order to reset the permissions on NTFS drive on Windows Server. Please refer to the following articles: Resetting NTFS Permissions on Windows Server 2003 How do I restore security settings to the default settings? Best Regards Dale Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
November 10th, 2010 12:48am

Thanks Dale, Below is the error message generated by Backup Exec. It repeats apx 40 times. Error : e00084af - The directory or file was not found, or could not be accessed. File was skipped : \\Server\C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Applicatio File was skipped : \\Server\C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Applicatio File was skipped : \\Server\C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Applicatio File was skipped : \\Server\C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Applicatio File was skipped : \\Server\C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Applicatio Upon reviewing Security Permissions on the C:\ProgramData; I discovered Permissions were being Inherited from C:\. My other Windows 2008 servers C:\ProgramData Permissions are not inherited they are specific to that folder. Here is a copy of the of the issue found in the Application log:Log Name: Application Source: Backup Exec Date: 10/5/2010 9:02:25 PM Event ID: 57481 Task Category: None Level: Error Keywords: Classic User: N/A Computer: Server Description: An unusual error (1921) was encountered while enumerating the contents of the directory: \\Server\C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data. It is possible that files or subdirectories have not been backed up. Please examine your job log or catalogs to ensure this directory tree was backed up in its entirety. I reviewed the link regarding resetting NTFS permissions and it looks promising. I will do a some research on how it applies to Windows 2008. I hope to work on this issue on the weekend, when I have the server for a couple of days. I did reset permissions for the $Recycle.Bin folder; (they were being inherited from C:\) and in doing so was able to empty it successfully. The error pop up is no longer an issue. The server; at this point is functional, but I'm concerned about applying any updates and rebooting. I also have an application upgrade that is coming up later this month that concerns me. Once again, Thanks! Manuel D. Parra
November 10th, 2010 11:29am

I’m glad to see that the Recycle Bin gets the right permissions and the error doesn’t pop up again. Regarding the error log of backup, I performed a lot of research, I found that if multiple application data folders formed, this issue occurs while taking a backup. This is by design. These folders should not be accessible and have a deny read/list permissions for everyone. If they are accessed, they will have multiple (32) application data folders. Thus please check the permissions of Application data folder, give the deny read/list permissions for everyone. Best Regards DalePlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
November 10th, 2010 8:28pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics