SYSTEM NTFS attribute missing

Question

I have a network share setup on my domain that our users can access. Today I started getting complaints that people could not access the top level share (\MYSERVER\SHARE), however, they could access any folder one level down from the share (\MYSERVER\SHARE\IT). I looked at the NTFS permissions for the share and they seemed to disappear, with the exception of my administrator group. The SYSTEM attribute in the NTFS permissions is showing up as a bunch of random characters now (unknown account), but only on the top level share. All of the folders one level down show the SYSTEM attribute still. When I look who the owner is on the folder, it is the random characters associated with the SYSTEM attribute (unknown account). Does anyone know what would cause this at all?

Answer 1

Hi,

I would like to check if the above reply could be of help? If yes, please help accept it as an answer, so that others meet a similar issue can find useful information quickly. If you have any other concerns or questions, please feel free to feedback.

---

If the reply could be of help, please help to accept it as an answer, thanks for your cooperation!
Thanks for your time!
Best Regards,
Anne

Answer 2

Hi,

In order to find out how/by whom file permissions were altered, I suggest you enable file access auditing to get specific events logged.

More specifically, SACL for Change permissions must be configured from folder Properties->Security->Advanced->Auditing.

More information for you:

Auditing File Access on File Servers

https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc771070(v=ws.11)?redirectedfrom=MSDN

----------------------------------------

If the reply could be of help, please help to accept it as an answer, thanks for your cooperation!
Thanks for your time!
Best Regards,
Anne

Answer 3

The disk may have failed or possible file system corruption. May need to chkdsk the drive.

--please don't forget to Accept as answer if the reply is helpful--