Search the Community

I need to search a share for desktop.ini and for each desktop.ini I find and need to change the ntfs permissions to remove the read attribute from this file. I am fine with the xcalcs part, its the script to search with the share eg \\server\users$ for desktop.ini. Any ideas or help would be much appreciated!

I just had to post a little report of the awesomeness of the diskpart utility in Windows 2003. The scenario was: I had installed two extra drives to a RAID controllers disk set and after the controllers redistribution of data was complete I needed to extend the partition to inclued all of the new free space. The usual corse of action would be to boot the server into gParted and resize the partition from there taking untold eons of time while the server was offline. I thought why not give google a go as 2008 has a nice quick online resize tool surely something simmilar exists for 2003. Answer, yes there is no GUI but the diskpart utility can do an almost instant expantion into the new space even on basic drives. Extend a Windows Server 2003 disk volume Much quicker and cleaner than the gParted solution and now I have an extra 2 hours at least to fight with other anomolies that may show up. diskpart FTW!

Hi everyone, I'm running into a weird NTFS/group permissions issue that I just can't wrap my head around at all. I'm really hoping someone can help me make sense of this. I have created a Server 2012 Active Directory domain and have created a second domain administrator account by creating a new user and adding that new user to the exact same groups as the default "Administrator" account. Seems simple, right? I've also created a default file share to be shared by all staff, as a test. The file share is in C:\Shares\SharedFolder, for simplicity sake. I've disabled inheritance on the "SharedFolder" and crafted my own permissions [keep in mind in Server 2000 and Server 2003 I have always done this and had absolutely no issues]. For share permissions, DOMAIN\Administrators = full control, and DOMAIN\Staff = full control. Both of these are groups. For Security, I have DOMAIN\Administrators = full control, and DOMAIN\Staff = modify. Again, both of these are groups. Then SYSTEM also has full control in Security. Great. Looks good. The identical setup on the previous Server 2003 network works flawlessly and always has. Now, because one of the 2003 servers is being carried over to the new network and virtualized, I've already used Disk2Vhd and converted it to a virtual machine, removed it from the previous domain, and added it to this domain as a test member server within Hyper-V on the domain controller. So, I then log out of the domain controller after making the group and security changes for the share. I have a login script that adds the share as a drive letter. Now, I log in to the domain controller [via RDP, same way I did the configuration with DOMAIN\Administrator] as the new test admin account, in the identical groups as the default Administrator account, and I notice I can't access the share. I see it in Computer, but I can't open it because I don't have permissions. Now, since the actual share folder resides on THAT machine that I'm RDP'd into, I open C:\Shares, and when I double click on SharedFolder, I got the "You don't currently have permission to access this folder. Click Continue to permanently get access to this folder." message, and then the Continue with UAC shield button. What's worse, is if I open a second RDP session and login as Administrator, and create just a new folder in the root of C, and then switch back to my test admin RDP session, I can't delete the folder without first right clicking on it, editing permissions, adding the test user that I'm logged in with, giving myself full control, applying, and THEN I can delete the folder. Just for fun, I logged in to the test VM I had carried over, running Server 2003, which is now on this network as a member server. I was able to log into that machine locally via Hyper-V manager, using the test domain admin account, and permissions worked perfectly. I could access the share with absolutely no issues and create and delete files/folders inside of it. Can someone please explain to me why this doesn't work in Server 2012, despite the test user having identical group permissions to the default Administrator account for the domain? I thought the idea was to be able to use groups whenever possible, but this share doesn't work unless I specifically define the individual user account of the new domain admin user. Thanks!

Hi all, I have recently been tasked with creating an all new Exam system for our College. I have set this up with Exam Users' Documents being redirected via Folder Redirection to a Shared documents area per exam account type but am running into an issue. The issue I am having is that I have configured the NTFS permissions on the Root folder where the Documents are stored (in a share) so that "CREATOR OWNER" gets Full Control to Subfolders and Files which works absolutely fine when the users log in and create their work in the exam etc. The issue arises when the Exam Managers need to drop an Exam paper into the Documents area of the Exam Users Account, the Exam Managers can put this file in but the file does not inherit any permissions for the Exam User to be able to open/access it. A blanket fix would be to apply a "Exam Takers GROUP" NTFS permission to the root folder but this could potentially give ExamUser001 access to ExamUser002's documents and this cannot be permitted. Does anyone else have a possible solution to this? Manually assigning NTFS permissions for each Users Documents folder (e.g: Giving Full Control to "ExamUser001" to "ExamUser001") is not an option as we have around 1000 accounts with this issue and this would require way too much time to complete. Any advice would be much appreciated! Thanks, Alex

I finally tracked down an issue I've had with office for over a decade. Where upon selecting "documents" to save a restricted message would appear, then pressing "ok" would open "documents" just fine.. Well it must be an oddity with my GPOs or the user share is made or something else... I've found that office whilst the default save location is "documents" the autorecover documents are in "appdata" (in the office settings). Now that I've lifted restrictions on my test pupil, clicking "documents" as a save location in office wants to save the document into appdata!?! I think this is because the pupil does NOT have "grant exclusive permissions" enabled on their user area. ("documents" fails to redirect if I enable that option) Do you have exclusive permissions for pupil areas? How do I configure the share to allow this? (as GPO fails to apply it if set in the redirect GPO) The full save location is the network shortcut folder which maybe important!

I'm having issues with the "Libraries" directories (Music, Pictures, Downloads etc) not inheriting permissions from the parent. SYSTEM and the user / owner of the Home Folder gets FC access, but no other permissions are applied. Attempting to take ownership with Domain Admin is unsuccessful, replacing permissions on child items is unsuccessful, logging on as server local admin and forcing inheritance from the parent is somewhat successful but results in a mess of permissions being added / duplicated. Directories are created when users are made in ADUC by using the %USERNAME% variable, inherited permissions from parent are applied to Home Folder successfully. It's only Libraries that are affected; all other directories in Home Folder inherit correctly.

Hey I can see loads of references to this but can't get my head around any of them - I have folders containing student home directories and I need them to have permissions to access them The folders are stored in "E:\Users\Students\Work\Intake08" (or Intake07 etc) on one of my servers The folder and user logon name are the same (e.g. 07smitha) and the share names are username$ and everyone has full access to the share I've seen so many scripts today that my head is aching - can someone please provide a script that will scan the directory for me and allocate permissions or walk through their one with me so I can customise it to my needs? Thanks