Guest tree leafs Posted January 30, 2008 Posted January 30, 2008 Hi, for some unknown reason, domain administrator account failed to access a particular folder, say e:\abc\def. "access denied" pops up when trying to open this folder. When looking at the folder properties, the securities tab does not appear. Using cacls e:\abc\def also got access denied error. How can I fix this problem? thanks in advance.
Guest Pegasus \(MVP\) Posted January 30, 2008 Posted January 30, 2008 Re: lost access to a folder "tree leafs" <treeleafs@hotmail.com> wrote in message news:ujpvFTuYIHA.1532@TK2MSFTNGP04.phx.gbl... > Hi, > for some unknown reason, domain administrator account failed to access a > particular folder, say e:\abc\def. "access denied" pops up when trying to > open this folder. When looking at the folder properties, the securities > tab does not appear. Using cacls e:\abc\def also got access denied error. > How can I fix this problem? > thanks in advance. > You can use fileacl.exe to seize ownership of this folder: http://www.microsoft.com/downloads/details.aspx?FamilyID=723f64ea-34f0-4e6d-9a72-004d35de4e64&displaylang=en
Guest tree leafs Posted January 30, 2008 Posted January 30, 2008 Re: lost access to a folder thanks I'll try it tomorrow and let you know how i goes. "Pegasus (MVP)" <I.can@fly.com.oz> wrote in message news:%23LvS$VyYIHA.1184@TK2MSFTNGP04.phx.gbl... > > "tree leafs" <treeleafs@hotmail.com> wrote in message > news:ujpvFTuYIHA.1532@TK2MSFTNGP04.phx.gbl... >> Hi, >> for some unknown reason, domain administrator account failed to access a >> particular folder, say e:\abc\def. "access denied" pops up when trying to >> open this folder. When looking at the folder properties, the securities >> tab does not appear. Using cacls e:\abc\def also got access denied error. >> How can I fix this problem? >> thanks in advance. >> > > You can use fileacl.exe to seize ownership of this folder: > http://www.microsoft.com/downloads/details.aspx?FamilyID=723f64ea-34f0-4e6d-9a72-004d35de4e64&displaylang=en >
Guest tree leafs Posted January 30, 2008 Posted January 30, 2008 Re: lost access to a folder Hi, I had a quick look at the tool. It looks like changing ownership needs "takeownership privilege". My current situation is the domain adminisrator does not have any access to this folder. As I mentioned, I even can't view acls using cacls command. I may have missed some switch that allows me to seize the ownership. Thanks again, "Pegasus (MVP)" <I.can@fly.com.oz> wrote in message news:%23LvS$VyYIHA.1184@TK2MSFTNGP04.phx.gbl... > > "tree leafs" <treeleafs@hotmail.com> wrote in message > news:ujpvFTuYIHA.1532@TK2MSFTNGP04.phx.gbl... >> Hi, >> for some unknown reason, domain administrator account failed to access a >> particular folder, say e:\abc\def. "access denied" pops up when trying to >> open this folder. When looking at the folder properties, the securities >> tab does not appear. Using cacls e:\abc\def also got access denied error. >> How can I fix this problem? >> thanks in advance. >> > > You can use fileacl.exe to seize ownership of this folder: > http://www.microsoft.com/downloads/details.aspx?FamilyID=723f64ea-34f0-4e6d-9a72-004d35de4e64&displaylang=en >
Guest Pegasus \(MVP\) Posted January 30, 2008 Posted January 30, 2008 Re: lost access to a folder My experience with this tool (and other permission tools) is that a domain admin can always seize ownership. If I'm wrong then you can run fileacl.exe while logged on under the System account, using "localsystem.exe" from here: http://assarbad.net/en/stuff. "tree leafs" <treeleafs@hotmail.com> wrote in message news:eZlk43yYIHA.748@TK2MSFTNGP04.phx.gbl... > Hi, > I had a quick look at the tool. > It looks like changing ownership needs "takeownership privilege". My > current situation is the domain adminisrator does not have any access to > this folder. As I mentioned, I even can't view acls using cacls command. > I may have missed some switch that allows me to seize the ownership. > Thanks again, > > "Pegasus (MVP)" <I.can@fly.com.oz> wrote in message > news:%23LvS$VyYIHA.1184@TK2MSFTNGP04.phx.gbl... >> >> "tree leafs" <treeleafs@hotmail.com> wrote in message >> news:ujpvFTuYIHA.1532@TK2MSFTNGP04.phx.gbl... >>> Hi, >>> for some unknown reason, domain administrator account failed to access a >>> particular folder, say e:\abc\def. "access denied" pops up when trying >>> to open this folder. When looking at the folder properties, the >>> securities tab does not appear. Using cacls e:\abc\def also got access >>> denied error. How can I fix this problem? >>> thanks in advance. >>> >> >> You can use fileacl.exe to seize ownership of this folder: >> http://www.microsoft.com/downloads/details.aspx?FamilyID=723f64ea-34f0-4e6d-9a72-004d35de4e64&displaylang=en >> > >
Guest Eric Denekamp Posted January 30, 2008 Posted January 30, 2008 Re: lost access to a folder if not, a Domain admin can give himself this right through group policy to maybe even that one machine: it is in the computer configuration, security settings, local policies, userright assignments. take ownership of..... give that right to your own account and wait for about 120 minutes... (if not, (i do not know by heart if this right is set every time trhe policies load, or just by boot,) reboot the system to force a policy load here) now you should at least be able to Seize ownership. (i have experienced not seeing the ACL's when i do not have access to a folder, but if i have the aforementioned right, I always could TAKE ownership and fix everything. sometimes it took me more that one go to get ownership af a folder structure, for I could only take ownership one level at a time, but I always got there. good luck Eric By the Way be very carefull you do not break anything when doing this, you have to reset all the permissions a user has to this folder(structure) "Pegasus (MVP)" <I.can@fly.com.oz> wrote in message news:%23Zx4d%23yYIHA.4272@TK2MSFTNGP05.phx.gbl... > My experience with this tool (and other permission tools) is > that a domain admin can always seize ownership. If I'm wrong > then you can run fileacl.exe while logged on under the System > account, using "localsystem.exe" from here: http://assarbad.net/en/stuff. > > > "tree leafs" <treeleafs@hotmail.com> wrote in message > news:eZlk43yYIHA.748@TK2MSFTNGP04.phx.gbl... >> Hi, >> I had a quick look at the tool. >> It looks like changing ownership needs "takeownership privilege". My >> current situation is the domain adminisrator does not have any access to >> this folder. As I mentioned, I even can't view acls using cacls command. >> I may have missed some switch that allows me to seize the ownership. >> Thanks again, >> >> "Pegasus (MVP)" <I.can@fly.com.oz> wrote in message >> news:%23LvS$VyYIHA.1184@TK2MSFTNGP04.phx.gbl... >>> >>> "tree leafs" <treeleafs@hotmail.com> wrote in message >>> news:ujpvFTuYIHA.1532@TK2MSFTNGP04.phx.gbl... >>>> Hi, >>>> for some unknown reason, domain administrator account failed to access >>>> a particular folder, say e:\abc\def. "access denied" pops up when >>>> trying to open this folder. When looking at the folder properties, the >>>> securities tab does not appear. Using cacls e:\abc\def also got access >>>> denied error. How can I fix this problem? >>>> thanks in advance. >>>> >>> >>> You can use fileacl.exe to seize ownership of this folder: >>> http://www.microsoft.com/downloads/details.aspx?FamilyID=723f64ea-34f0-4e6d-9a72-004d35de4e64&displaylang=en >>> >> >> > >
Recommended Posts