Notice those are all inherited rights. Notice also that UAC comes into play.
Is your PowerShell session elevated? From: [email protected] [mailto:[email protected]] On Behalf Of Webster Sent: Thursday, April 23, 2015 8:53 AM To: [email protected] Subject: [NTSysADM] RE: trying to find a thread about missing account(s) on drive/folder ACE c:\>icacls.exe c:\gporeports c:\gporeports CREATOR OWNER:(OI)(CI)(IO)(F) LabADDomain\ctxadmin:(OI)(CI)(F) BUILTIN\Users:(OI)(CI)(F) NT AUTHORITY\SYSTEM:(I)(OI)(CI)(F) BUILTIN\Administrators:(I)(OI)(CI)(F) BUILTIN\Users:(I)(OI)(CI)(RX) BUILTIN\Users:(I)(CI)(S,AD) BUILTIN\Users:(I)(CI)(S,WD) LabADDomain\ctxadmin:(I)(F) CREATOR OWNER:(I)(OI)(CI)(IO)(F) Successfully processed 1 files; Failed processing 0 files But: Windows PowerShell Copyright (C) 2014 Microsoft Corporation. All rights reserved. PS C:\Windows\system32> get-gporeport -All -ReportType HTML -Path c:\GPOReports get-gporeport : Access to the path 'c:\GPOReports' is denied. At line:1 char:1 + get-gporeport -All -ReportType HTML -Path c:\GPOReports + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (:) [Get-GPOReport], UnauthorizedAccessException + FullyQualifiedErrorId : System.UnauthorizedAccessException,Microsoft.GroupPolicy.Commands.GetGpoReportCommand PS C:\Windows\system32> Thanks Webster From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of Michael B. Smith Sent: Thursday, April 23, 2015 7:49 AM To: [email protected]<mailto:[email protected]> Subject: [NTSysADM] RE: trying to find a thread about missing account(s) on drive/folder ACE What does icacls.exe say about the folder? From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of Webster Sent: Thursday, April 23, 2015 8:44 AM To: [email protected]<mailto:[email protected]> Subject: [NTSysADM] trying to find a thread about missing account(s) on drive/folder ACE I have run into an issue in my lab where I can create a folder but cannot create any files in the folder after the folder is created. I thought I remembered a thread on this list earlier this year about a similar issue and it was a missing account that needed to be added back. I can't find that thread. My lab is 2 2012R2 DCs and FFL of 2012 R2. All my servers are 2012 R2. Thanks Webster
