Share via

Unable to change NTFS permissions regardless of Full Control access

Maciej Krzysztof Dolny 0 Reputation points
2024-05-07T17:29:11.0466667+00:00

Hello

There's a folder on a server to which I have full control permissions. I need to add new security group to the folder. It should inherit permissions from parent folder, but it doesn't, I receive message " Failed to enumerate... Access denied". I have tried to add the group directly to the folder with properties tab and with icacls, I have tried to change owner in properties and with takeown, I have tried to reset permissions with icacls, nothing works, I'm always reciving access denied message. If I create new folder inside the one I mentioned, I can chagne permissions. If I create a copy any of subfolders I am able to change the permissions, but I'm unable to change permissions on original ones. Is there a solution to the problem?

I have even tried to copy the folder, rename copy to fit the old name and delete the old one. I can create a copy, I can rename old folder, but I'm unalbe to remove it. I have tried to use robocopy using empty folder as a source, but I recieve access denied message.

Windows
Windows
A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.
4,865 questions
Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,311 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Ian Xue (Shanghai Wicresoft Co., Ltd.) 31,256 Reputation points Microsoft Vendor
    2024-05-08T03:37:29.49+00:00

    Hi Maciej,

    Hope you're doing well.

    Here are some steps you can try to troubleshoot and resolve the problem:

    1. Ensure that you have ownership of the folder. You can use the "takeown" command in Command Prompt to take ownership recursively:

    takeown /F "path_to_folder" /R /A

    Replace "path_to_folder" with the actual path to the problematic folder.

    1. Use the "Effective Access" tab in the folder's properties to verify whether you have the necessary permissions to modify the folder's security settings.
    2. Verify that your user account is a member of the appropriate administrative groups (e.g., Administrators, Domain Admins) that have permissions to modify folder security settings.
    3. Sometimes, antivirus or security software can interfere with permissions. Temporarily disable any security software running on the server and try modifying the folder permissions again.
    4. Check if auditing is enabled on the folder or parent folders. Auditing settings could be preventing certain actions due to security policies.
    5. Review any Group Policy settings that may be applying to the folder or parent folders. Group Policy settings could be restricting permissions or inheritance.

    Best Regards,

    Ian Xue

    If the Answer is helpful, please click "Accept Answer" and upvote it.

    0 comments