There are no deny permissions. I don't think I've ever seen them used in production.
The effective permissions was a good lead, turns out one of the issues was resolved by looking at the right folder. AR vs AP. The second issue self-resolved. I saw the user get denied, by the time I checked all of the permissions and posted the issue here and got back to the user the problem was resolved. User did not log out, no changes. User was always in domain users. Just need to keep an eye out for if/when it happens again. Thanks, Robert On Wed, Oct 16, 2013 at 12:56 PM, Miller Bonnie L. < [email protected]> wrote: > Any FSRM/quota blocking things? I would also hit the volume with a > read-only chkdsk and make sure there isn’t an underlying file system > issue. Check the file server event logs and make sure it isn’t having > issues communicating with a DC/GC.**** > > ** ** > > *From:* [email protected] [mailto: > [email protected]] *On Behalf Of *Aakash Shah > *Sent:* Wednesday, October 16, 2013 8:49 AM > *To:* [email protected] > *Subject:* RE: [NTSysADM] File Server Permission Issue**** > > ** ** > > You can also try using the “effective permissions” in the Advanced > security tab for the user to see if the effective permissions end up being > denied for whatever reason. This can also help during testing as you make > changes to the permissions to the folder.**** > > ** ** > > -Aakash Shah**** > > ** ** > > *From:* [email protected] [ > mailto:[email protected] <[email protected]>] *On > Behalf Of *James Rankin > *Sent:* Wednesday, October 16, 2013 8:07 AM > *To:* [email protected] > *Subject:* Re: [NTSysADM] File Server Permission Issue**** > > ** ** > > If the Share permissions are set thus, what are the NTFS permissions on > the files themselves? Is inheritance turned on for all of the folders they > are trying to access? Is there any Special access applied in the Advanced > section - don't forget, a Deny trumps all.**** > > ** ** > > You may need to turn Auditing on specifically for the folder, to see > what's happening.**** > > ** ** > > Cheers,**** > > ** ** > > ** ** > > JR**** > > ** ** > > On 16 October 2013 15:56, Robert Cato <[email protected]> wrote:**** > > **** > > **** > > Windows 2008 Standard SP2 (Virtual on Hyper-V)**** > > **** > > A folder on D: is shared with a 1.2TB drive that is 90% full. Share > permissions are set for Domain Users - Change, Administrators - Full > Control.**** > > **** > > The issues are 2-3 layers deep in the folder structure. The drives are > mapped with logon scripts.**** > > **** > > There are a couple of isolated issues.**** > > **** > > 1. UserA gets an access denied when he tries to navigate to: > L:\Accounting\Accounts Receivable\. He is one the Accounts Receivable > folder by name with modify permission. He can access other folders in > Accounting.**** > > 2. UserB gets an access denied when he tries to navigate to: > L:\Shared\Audit. Domain users is granted modify access and the user is in > domain users. **** > > **** > > No luck so far digging around the Event Logs, not sure if we don't have > auditing turned up enough.**** > > **** > > Appreciate any input about what to audit or where to start troubleshooting. > **** > > **** > > Thanks,**** > > Robert**** > > > > **** > > ** ** > > -- > *James Rankin* > Technical Consultant (ACA, CCA, MCTS) > http://appsensebigot.blogspot.co.uk**** >
