File permissions issue for files downloaded from internet / synchronized by OneDrive

Ronak 1 Reputation point
2023-06-07T08:05:27.0633333+00:00

I am trying to backup several different Windows computers to a single Windows computer by sharing the drives of the target computers and accessing them from the backup computer. But I am running into a file access permission issue.

 

Setup:

The target computers have a Windows administrator account which was created as a local account and then converted by signing in with a Microsoft account.

This administrator account is part of the administrator group.

Image showing Administrator account part of administrators group

 

The D drive of target computer is shared with this Administrator account with read only permission so that the backup computer can use the target computer's administrator account credentials to read files to backup. [*** Email address is removed for privacy *** in the below image is the same administrator account shown above]

Image showing sharing settings

 

For any file created on the local computer the security permissions are:

Image of local file permissions

 

For any file downloaded by OneDrive or Teams or from the internet the file security permissions are different as :

Image of permissions for files downloaded from internet

 

Backup computer:

  • Windows 10
  • Local administrator account
  • No Microsoft Account
  • No OneDrive
  • No AzureAD account

 

Target computer:

  • Windows 11
  • Local administrator account converted to Microsoft-account-sign-in administrator account.
  • D drive shared with above administrator account with read only permission.
  • Users use an AzureAD joined account but this is not used for sharing and backup.

 

The target computers have OneDrive on them. The computers are connected over VPN. Although the issue persists when connecting directly on LAN too.

 

Problem:

The files downloaded by users from the internet or synchronized by OneDrive to target computers or received in Teams chat have different permissions than all other files created on the local computer. Even though the Administrator group is appearing in both cases, the files downloaded from internet / OneDrive / Teams are not accessible to backup computer with administrator account credentials when browsing the network folder. All other files are accessible and being backed up.

 

Requested result:

How can I access the files from backup computer so that they can be backed up? More specifically, how do I make the files downloaded by user / OneDrive / Teams inherit permissions of the folder they are in?

 

Work around:

For a downloaded file I can inherit the permissions from the folder that it belongs to but this needs to be done every time a file is downloaded on any target computer by any user. Trying to change the permissions of such a file, resets the permissions and inherits them from the upper level folder. This behaviour is similar to that described in this article. But it should not be, since I am not moving a folder but downloading fresh files which never existed on the local storage.

 

Actions tried:

I tried giving full permissions to the administrator account, but that did not help.

Windows
Windows
A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.
4,748 questions
OneDrive Management
OneDrive Management
OneDrive: A Microsoft file hosting and synchronization service.Management: The act or process of organizing, handling, directing or controlling something.
1,122 questions
Windows 10 Security
Windows 10 Security
Windows 10: A Microsoft operating system that runs on personal computers and tablets.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
2,754 questions
{count} votes

1 answer

Sort by: Most helpful
  1. Khaled El-Sayed Mohamed 1,140 Reputation points
    2023-06-07T11:38:32.45+00:00

    Hi

    To ensure that the files downloaded from the internet or synchronized by OneDrive inherit the permissions of the folder they are in, you can try the following steps:

    On the target computer (Windows 11), navigate to the root folder where the files are stored (e.g., D drive).

    Right-click on the folder and select "Properties" from the context menu.

    In the folder's properties, go to the "Security" tab.

    Click on the "Advanced" button.

    In the Advanced Security Settings, click on the "Change Permissions" button.

    Check the option "Replace all child object permission entries with inheritable permission entries from this object."

    Click "OK" and confirm any prompt that appears.

    This should force the files within the folder to inherit the permissions of the parent folder, including the files downloaded from the internet or synchronized by OneDrive.

    After performing these steps, try accessing the files from the backup computer again and see if you can back them up successfully. The inherited permissions should now allow the backup computer's administrator account to access the files.

    Note: Keep in mind that modifying permissions on system folders or important files should be done with caution. Ensure that you have a backup of your data and consider the implications of changing permissions on your system.