NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Can’t change permissions – “The parameter is incorrect”
I have three ReadyNAS Pro Business boxes on Windows Server 2003 domain. Just noticed that there are some issues with changing permission on Windows machines. Basically if a user creates a folder an...
We also have this problem, and worse!
Running a ReadyNAS Pro (RAIDiator 4.2.15 ) with all users documents on it; Offline-files of My Documents-folder.
Server 2003 R2 AD-domain with mix of XP and Win7 clients.
Server 2003, Server 2003 R2, Server 2008 and Server 2008 R2 is available as member-servers.
All of a sudden users are locked out of randomly selected folders with "Access denied". Not necesarilly all folder, but some. When we try to fix this the error "Parameter is incorrect" occures, what ever we try to do on that users folder.
At the same time the other 40+ users are working fine, so it's not likely to be an error in the root-folder.
C:\USERS shared as "\\READYNAS\Users" in AD domain mode.
All users folders directly under this folder and "My Document" redirected to "\\READYNAS\USERS\%USERNAME%"
We have ACL like this;
USERS-folder (standard set by RAIDiator i think);
administrator - Full control - This folder, subfolders and fles
Users (READYNAS\Users) - Special - This folder only
nogroup (UNIX Group\nogroup) - Special - This folder only
Everyone - Special - This folder only
CREATOR OWNER - Special - Subfolder and files only
CREATOR GROUP - Special - Subfolder and files only
Everyone - Special - Subfolder and files only
On Sub-folders, named %USERNAME% (firtstname.lastname) we have;
Domain Admins - Full control - This folder, subfolders and fles
%USERNAME% - Full control - This folder, subfolders and fles
Everyone - None - This folder, subfolders and fles
CREATOR OWNER - Special - Subfolder and files only
CREATOR GROUP - Special - Subfolder and files only
administrator - Special - This folder only
BUT we have set ONLY Domain Admins and %USERNAME%, nothing else!
In some cases other users and groups appear in the ACL's without we adding them!
For exampel I have a "35926 (Unix Group\35926)" added in some users folders ACL's, and that is not anything I put in there! not even the user... Also "root (Unix User\root)" is set in some ACL's.
In some folder the "Domain Users" group appear, but I dont see a pattern that it is this group that are the error (sorry). Some folders work fin despite having it in ACL, still there is some folders that stop working and dont have it in ACL.
ReadyNAS messes with ACL's, that's for sure.
Problem is that it changes! If we set correct permissions and it works, we cannot trust it to work "forever".
As I type this I got two users that cannot create folders anywhere in their "My Documents" but can read them all fine. One other user has one folder (of many) that is unaccessible with error "Access denied".
...and I cannot do ANYTHING to fix it!
I as an domain admin get "parameter incorrect" when trying to change ACL or take ownership, "access denied" when trying to copy mentioned folder above.
FRUSTRATING!
/Per Dahlström, IT-consultant and Netgear Partner
MCSE with 20 years of experience of Windows Servers (NT3.5 - to date)
Running a ReadyNAS Pro (RAIDiator 4.2.15 ) with all users documents on it; Offline-files of My Documents-folder.
Server 2003 R2 AD-domain with mix of XP and Win7 clients.
Server 2003, Server 2003 R2, Server 2008 and Server 2008 R2 is available as member-servers.
All of a sudden users are locked out of randomly selected folders with "Access denied". Not necesarilly all folder, but some. When we try to fix this the error "Parameter is incorrect" occures, what ever we try to do on that users folder.
At the same time the other 40+ users are working fine, so it's not likely to be an error in the root-folder.
C:\USERS shared as "\\READYNAS\Users" in AD domain mode.
All users folders directly under this folder and "My Document" redirected to "\\READYNAS\USERS\%USERNAME%"
We have ACL like this;
USERS-folder (standard set by RAIDiator i think);
administrator - Full control - This folder, subfolders and fles
Users (READYNAS\Users) - Special - This folder only
nogroup (UNIX Group\nogroup) - Special - This folder only
Everyone - Special - This folder only
CREATOR OWNER - Special - Subfolder and files only
CREATOR GROUP - Special - Subfolder and files only
Everyone - Special - Subfolder and files only
On Sub-folders, named %USERNAME% (firtstname.lastname) we have;
Domain Admins - Full control - This folder, subfolders and fles
%USERNAME% - Full control - This folder, subfolders and fles
Everyone - None - This folder, subfolders and fles
CREATOR OWNER - Special - Subfolder and files only
CREATOR GROUP - Special - Subfolder and files only
administrator - Special - This folder only
BUT we have set ONLY Domain Admins and %USERNAME%, nothing else!
In some cases other users and groups appear in the ACL's without we adding them!
For exampel I have a "35926 (Unix Group\35926)" added in some users folders ACL's, and that is not anything I put in there! not even the user... Also "root (Unix User\root)" is set in some ACL's.
In some folder the "Domain Users" group appear, but I dont see a pattern that it is this group that are the error (sorry). Some folders work fin despite having it in ACL, still there is some folders that stop working and dont have it in ACL.
ReadyNAS messes with ACL's, that's for sure.
Problem is that it changes! If we set correct permissions and it works, we cannot trust it to work "forever".
As I type this I got two users that cannot create folders anywhere in their "My Documents" but can read them all fine. One other user has one folder (of many) that is unaccessible with error "Access denied".
...and I cannot do ANYTHING to fix it!
I as an domain admin get "parameter incorrect" when trying to change ACL or take ownership, "access denied" when trying to copy mentioned folder above.
FRUSTRATING!
/Per Dahlström, IT-consultant and Netgear Partner
MCSE with 20 years of experience of Windows Servers (NT3.5 - to date)
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
