Server 2008 and server 2008 R2 permission propagation issue
-
Tuesday, January 29, 2013 5:51 PM
Ladies and Gents,
I have a question related to a domain functional level of 2008 r@, and had a need to run server 2008, the need is that I need to run an 32 bit OS for an application from a supplier and this app will only run on 32 bit. Not the best solution, but this is what we have been dealt
The 2008 server is part of the 2008 R2 domain, when I add permissions to folders all that gets propagated to the folders concerned is the local server administrator and users permissions, all domain level permissions do not propagate to the folders concerned, now I can manually add the permissions to the folder and files below, but there are files that will fail saying that access is denied. the permissions are being set by a domain admin account.
while trying to run the program, the access denied causes the app to error out and thus will not install.
I had a thought that I may be able to build a 2008 R2 server, then create the 32 bit environment for this app, this may be the only method which remains for this app.
Thanks in advance for the reply's
All Replies
-
Tuesday, January 29, 2013 6:19 PMModerator
Hi Michael,
>> I have a question related to a domain functional level of 2008 r@, and had a need to run server 2008, the need is that I need to run an 32 bit OS for an application from a supplier and this app will only run on 32 bit.
Domain functional level has nothing to do with the issue related to permission propagation.
To know more about Domain Functional levels, please refer following articles
Understanding Domain and Forest Functional Levels
Understanding Active Directory Domain Services (AD DS) Functional Levels
.
>> I had a thought that I may be able to build a 2008 R2 server, then create the 32 bit environment for this app, this may be the only method which remains for this app.
WS 2008 R2 is a 64bit OS, though it supports 32bit applications, in my perception it's better not to run 32bit apps on that OS since 32bit application might not function as it should on 32bit platform.
WS 2008 (non R2) comes in both 32bit and 64bit flavours, you might want to build a WS 2008 32bit server and then run your 32bit app on that.
.>> when I add permissions to folders all that gets propagated to the folders concerned is the local server administrator and users permissions, all domain level permissions do not propagate to the folders concerned, now I can manually add the permissions to the folder and files below, but there are files that will fail saying that access is denied. the permissions are being set by a domain admin account. while trying to run the program, the access denied causes the app to error out and thus will not install.
Can you please let us know, on which folder/s are you setting up permissions and the name of the application which requires specific rights on folder/s ?
Did you try taking the ownership of parent folder ?
Please see following article to understand NTFS Permissions
Understanding Windows NTFS Permissions
Also, Take Ownership of a File or Folder
Thanks
Regards, Santosh
I do not represent the organisation I work for, all the opinions expressed here are my own.
This posting is provided "AS IS" with no warranties or guarantees and confers no rights.
Whenever you see a helpful reply, click onVote As Helpful & click on
Mark As Answer if a post answers your question.
- Edited by Santosh BhandarkarMicrosoft Community Contributor, Moderator Tuesday, January 29, 2013 6:20 PM formatting fixed
-
Tuesday, January 29, 2013 6:29 PM
Santosh,
I can take ownership of the parent folder, and it makes no difference, I application is a proprietary application for the food industry and is only 32 bit. the permissions are set on the parent folder, selecting to propagate through all sub folders and files. this fails on files such as log files or script files. and even if I take ownership of the file, then try set the permissions, it fails.
I have had a second person check my settings and has had the same issue with the permissions, it is very strange. I will say we are running a cluster server, which has server 2008 R2 installed, linking to a Drobo B1200i the transaction tier is installed in the Drobo as well. each of the two nodes in the cluster has 32 Gig of Ram and effective 12 cores for processing. the server 2008 install is on a VM on Hyper-V and is joined to the network and has had all patches and updates installed.
I am beginning to think I may need to rebuild this unit and try again.
Thanks
-
Tuesday, January 29, 2013 7:01 PMModerator
Michael,
I still suspect that, issue is related to ownership !
Try taking the ownership of the parent folder and make sure to grant full rights to desired user or group
An E.G.
Please go through this thread and see if anything helps.
Regards, Santosh
I do not represent the organisation I work for, all the opinions expressed here are my own.
This posting is provided "AS IS" with no warranties or guarantees and confers no rights.
Whenever you see a helpful reply, click onVote As Helpful & click on
Mark As Answer if a post answers your question.
- Marked As Answer by Cheers ZHANGMicrosoft Contingent Staff, Moderator Monday, February 04, 2013 6:35 AM
-
Tuesday, January 29, 2013 7:25 PM
Santosh,
This is exactly what I did with the folders and files on the system, the issue remains the same..
I am not sure if the antivirus software is also playing a part, I am going to remove it and then try again or just rebuild the system, this system is not a production live system yet so i can tear it down and rebuild as needed.
Thanks for your help
Mike
-
Tuesday, January 29, 2013 7:30 PMModerator
Good luck, please post your findings once you are through with the testing.Santosh,
This is exactly what I did with the folders and files on the system, the issue remains the same..
I am not sure if the antivirus software is also playing a part, I am going to remove it and then try again or just rebuild the system, this system is not a production live system yet so i can tear it down and rebuild as needed.
Thanks for your help
Mike
Regards, Santosh
I do not represent the organisation I work for, all the opinions expressed here are my own.
This posting is provided "AS IS" with no warranties or guarantees and confers no rights.
Whenever you see a helpful reply, click onVote As Helpful & click on
Mark As Answer if a post answers your question.
-
Tuesday, January 29, 2013 8:55 PMI will do, Thanks you again for the information

