Guest Dmitry Bond Posted March 8, 2009 Posted March 8, 2009 Hi. I just faced COMPLETELY STRANGE behaviour in Windows Server 2008. I have a file in C:\WINDOWS folder. I want all users from the local "Power Users" group can change this file. So, I granted Full Access "Power Users" group to this file. But it is still not accessible! WHY!?!?! I have a user "User1" which belongs only to local "Power Users" group. I have a file with granted "Full Access" for "Power Users" group. BUT IT DOES NOT WORK! What the ....?!??!?! By default mentioned file security is = "Full Access" for "Administrators", "SYSTEM" and Read-only for "Users". So, I added "Full Access" for "Power Users" but it did not help! As for me it is completely unexpected behaviour from Windows. Looks like a bug. Do you know anything about this? Help me please. /Dmitry. Quote
Guest Anteaus Posted March 9, 2009 Posted March 9, 2009 Group permissions IME only take effect after a restart of the client computer (which in this case is the server itself) Since servers are rarely rebooted, is this your problem? If you add the user account directly, this should have immediate effect. The other possible issues might be a Deny permission (which takes precedence) or a block on inheritance. Info based on server 2000/2003 BTW, but I presume 2008 is similar. "Dmitry Bond" wrote: <span style="color:blue"> > Hi. > > I just faced COMPLETELY STRANGE behaviour in Windows Server 2008. > > I have a file in C:WINDOWS folder. I want all users from the local "Power > Users" group can change this file. So, I granted Full Access "Power Users" > group to this file. But it is still not accessible! WHY!?!?! > > I have a user "User1" which belongs only to local "Power Users" group. > I have a file with granted "Full Access" for "Power Users" group. > BUT IT DOES NOT WORK! > What the ....?!??!?! > > By default mentioned file security is = "Full Access" for "Administrators", > "SYSTEM" and Read-only for "Users". So, I added "Full Access" for "Power > Users" but it did not help! > > As for me it is completely unexpected behaviour from Windows. Looks like a > bug. > > Do you know anything about this? > Help me please. > > /Dmitry.</span> Quote
Guest Dmitry Bond Posted March 9, 2009 Posted March 9, 2009 Hi. Thanks. Yes, I thought about system restart, I tried to restart computer but it didnot help. :-( Only thing helped - I removed "Power Users" and granted "Full Access" for "Users" then my user can change the file. But I do not understand - why I need to grant permissions to "Users" group if my user belongs only to "Power Users" group?! It looks like "Power Users" group in server 2008 is kind of "derived from" "Users" group and not works as a standalone entity... :-\ quite strange. /Dmitry. "Anteaus" wrote: <span style="color:blue"> > Group permissions IME only take effect after a restart of the client computer > (which in this case is the server itself) Since servers are rarely rebooted, > is this your problem? > > If you add the user account directly, this should have immediate effect. > > The other possible issues might be a Deny permission (which takes > precedence) or a block on inheritance. > > Info based on server 2000/2003 BTW, but I presume 2008 is similar. > </span> [...] Quote
Guest Anteaus Posted March 9, 2009 Posted March 9, 2009 Agree, this sounds like a bug. Come to think of it, I did a brief test of Server 2008 a while back, and hit something similar in that I couldn't get sharing of files to any earlier OS to work, no matter what filesystem permissions I set. "Dmitry Bond" wrote: <span style="color:blue"> > Hi. > > Thanks. Yes, I thought about system restart, I tried to restart computer but > it didnot help. :-( > > Only thing helped - I removed "Power Users" and granted "Full Access" for > "Users" then my user can change the file. > > But I do not understand - why I need to grant permissions to "Users" group > if my user belongs only to "Power Users" group?! > > It looks like "Power Users" group in server 2008 is kind of "derived from" > "Users" group and not works as a standalone entity... :- quite strange. > > /Dmitry. > > "Anteaus" wrote: > <span style="color:green"> > > Group permissions IME only take effect after a restart of the client computer > > (which in this case is the server itself) Since servers are rarely rebooted, > > is this your problem? > > > > If you add the user account directly, this should have immediate effect. > > > > The other possible issues might be a Deny permission (which takes > > precedence) or a block on inheritance. > > > > Info based on server 2000/2003 BTW, but I presume 2008 is similar. > > </span> > [...]</span> Quote
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.