- Posts: 3
- Thank you received: 0
The Explicit Deny
19 years 8 months ago #7531
by mikedbom
The Explicit Deny was created by mikedbom
I was messing around with permissions on my Win2k server from an XP Pro station and somehow managed to explicitly deny full control of a folder to the Everyone group. I had ownership of the folder and full control granted to my domain user account, but now i cannot access the folder. The properties reveal only a general and custom tab and the file size is reading 0 bytes. Did I lose all the information in this folder? Can I recover this folder or undo the explicit deny?
Any help would be appreciated. Thanks.
Any help would be appreciated. Thanks.
19 years 8 months ago #7532
by MezzUp
Replied by MezzUp on topic Re: The Explicit Deny
You probably don't see the Security tab because you don't have the "Read permissions" permission.
I'm no Windows ACL expert, but I'm pretty sure Administrator always has the "Take ownership" permission, and then you could get the "Change permissions" permission and then open the folder.
If the advice above isn't valid, I think you can connect the hard drive to another computer, log into he Windows on that computer, and open up the folder from the other Win, which I don't think would follow the permission list with the explicit deny
I'm no Windows ACL expert, but I'm pretty sure Administrator always has the "Take ownership" permission, and then you could get the "Change permissions" permission and then open the folder.
If the advice above isn't valid, I think you can connect the hard drive to another computer, log into he Windows on that computer, and open up the folder from the other Win, which I don't think would follow the permission list with the explicit deny
19 years 8 months ago #7533
by mikedbom
Replied by mikedbom on topic re: MezzUp
I do have the permission to read the permissions, but the security tab is not even available anymore. See, i changed the permissions to explicitly deny everyone but me, but by denying the Everyone group, everyone, including administrators are denied access. There has got to be a way to reverse it, I just dont know how. I need to be able to recover the files inside of that folder.
19 years 8 months ago #7535
by jhun
Replied by jhun on topic Re: The Explicit Deny
hi
i think that you are not on a domain environment but rather on a workgroup.
as far as i know (correct me if i'm wrong ) if you are on a domain level these properties of a folder are enabled and on a workgroup level, these are disabled. on a domain level, even though you have removed all permissions explicitly, you would still have the security tab on a properties of a folder highlighted. and mezzup is correct that you can take ownership of the folder and reset all permissions.
i think that you are not on a domain environment but rather on a workgroup.
as far as i know (correct me if i'm wrong ) if you are on a domain level these properties of a folder are enabled and on a workgroup level, these are disabled. on a domain level, even though you have removed all permissions explicitly, you would still have the security tab on a properties of a folder highlighted. and mezzup is correct that you can take ownership of the folder and reset all permissions.
19 years 8 months ago #7537
by mikedbom
Replied by mikedbom on topic Re: The Explicit Deny
Maybe i havent provided enough information, but I am on a domain. My workstation communicates directly with a server that is linked to a WAN for multiple locations. As administrator of my workstation, I accessed a mapped network drive on which a folder of mine resides. I was trying to make it so that nobody but me could access it by denying everyone, taking ownership of the file and allowing only me full control. But i am still a part of the everyone group so i locked myself out as well. Now, access is denied to that folder by all, ownership cannot be taken, it cannot be copied, moved, cut, or altered. I am looking for a way to reverse those permissions to get my stuff back.
Thanks for the input so far.
Thanks for the input so far.
Time to create page: 0.128 seconds