Can’t change permissions – “The parameter is incorrect”

Yes, refer to my post above. I still can't reproduce it based on what you guys have told me, and obviously I can't just say "well it works for me" and leave it at that. There's something getting lost in translation here(I mean that in the sense of jotting down the steps taken) and I want to get to the bottom of it.

I am not sure if my problem is same than other users but it seems to have same. I get all kind of error messages when try to change or remove permission from NAS share (folders).

Problem was when I was log in to windows with my domain user account (which has some rights to these folders). After that I open explorer and RAIDar with domain admin accounts and try to change permission or delete group. No luck and I gets these error messages.

When I log in other PC with local admin and open Explorer with domain admin (actually only open \\NAS with it) I can do what ever I want. I hope this help someone...

-JeIlMa

+1 on having this issue. I have tried all kinda of different settings and permissions and when I try editing certain permissions i also get this error.

I'm still waiting for someone with this issue to give me the information I requested above.

I believe I figured out the problem. It appears to be an issue with the Parent folder's ACL setup.

Lets say you grant "Doman Admins" with the permission "This Folder, Sub Folder, & Files" with full access to the share folder. Whenever a user with the default group of Domain admins creates a new folder, the folder on the unix side gets setup as domain admins. The parent folder also has Everyone full access and propogates down to the child folder. Now you go to the sub folder and want change or remove the Everyone Full access to allow ONLY domain admins access to that folder. What appears to be happening is that it's trying to modify the unix side's acl and trying to reapply the "default:group" acl and its getting rejected at that point.

In order for me to make it stop giving the incorrect paramter error I had to go to the child folder and remove the domain admins which makes it basically reset for that folder. Then I can change any other permssion as needed. Then when I try to reapply full access so that new child folders under this child will propogate I then get the error again.

Hope this makes sense.

I also discovered a security issue. Lets say your parent folder has Everyone full access, but the child folder everyone was read only access. Anyone fitting the everyone category has the ability to rename the folder. I found that they cannot delete the folder which is a good thing, but having the ability to rename a folder imo is bad security.

Grievous, what information exactly you need? I and others have given our network details and explained when the error occurs. There must something different in your environment… I am a bit surprised that nearly 3 months since my original post and after so many people reporting this you still can’t confirm that this is a problem…

Netgear tech support guys have confirmed that they can reproduce this by simply following their own instructions on http://www.readynas.com/?p=1987. Can’t you just check my case notes and speak to a technician who provided a workaround? He could reproduce this straight away. He also promised to provide a permanent fix in a future firmware release…

arunasad, I'll quote my post.

Grievous wrote:

Ced, You said that you specified domain user permissions, and then tried to delete them? Here's what I want. A screenshot of your Frontview permissions, a screenshot of your share permissions in Windows, and then a screenshot of the folder permissions. However I want the screenshots to show what exactly it is you're trying to set the permissions to, before you hit "apply". Send them to me as logs(information is in my signature).

I've asked a couple of times now that someone provide me with the information, no one wants to. Following the previously given instructions, it works just fine for me. And by the way, support cannot promise a fix for an issue.

jtrahan, was that domain admin group permission set via frontview, or on the share via windows?

Regarding the security issue, I have a share configured with everyone having full control, then a folder within that share with everyone having read & execute, then when logged in as a normal domain user(not a member of domain admins) I can't change the name of that folder that's set as read & execute for the everyone group.

I am also having this issue for me it seems to have appeared after updating to 4.2.15. Windows 2008 Server AD domain based network mix of Win 7 and XP Clients. I have made NO CHANGES to permission on the NAS share.

Creating a new folder on the share results in the same issues as other are having. Domain users are blocked from accessing the folder. I have tried modifying the rights from the Server, Win xp client and Win 7 client to no avail. I have tried removing the domain uses group using the windows client but based on above the NAS apparently assigns those rights.

Trying to modify domain user rights on a folder that already existed prior to applying the update also was unsuccessful and in fact fubar'd user access to the folder.

on the new folder reviewing the advanced settings I found that root was the owner of the folder - i then took control with my user account which is also a domain admin - attempted to change permissions - no go

under advance permissions it shows permission as special - not inherited and this folder only. Apparently 4.2.15 borked all the AD settings on the NAS. Looks like this has been happening for a while - hopefully netgear will actually decide to fix it - essentially the NAS is now a BRICK for me

edit: also i did contact netgear support and was told that tech support is aware of the issue and has a fix but it would cost me either 75.00/hr or 299.00 for a support contract in order to get it resolved. Clearly netgear is aware of the issue and apparently is looking at it as a way to increase their revenue.

Grievous wrote:

arunasad, I'll quote my post. Grievous wrote: Ced, You said that you specified domain user permissions, and then tried to delete them? Here's what I want. A screenshot of your Frontview permissions, a screenshot of your share permissions in Windows, and then a screenshot of the folder permissions. However I want the screenshots to show what exactly it is you're trying to set the permissions to, before you hit "apply". Send them to me as logs(information is in my signature). I've asked a couple of times now that someone provide me with the information, no one wants to. Following the previously given instructions, it works just fine for me. And by the way, support cannot promise a fix for an issue. jtrahan, was that domain admin group permission set via frontview, or on the share via windows? Regarding the security issue, I have a share configured with everyone having full control, then a folder within that share with everyone having read & execute, then when logged in as a normal domain user(not a member of domain admins) I can't change the name of that folder that's set as read & execute for the everyone group.

I've just sent you the screenshots you've asked for. If you need anything else, please let me know.

Conn, thanks. Just to clarify about screenshot 7, when you add that user and hit apply is that when you're running into the "Parameter is incorrect" error? Because it looks like the permission for that user has already been applied since the apply button is grayed out(or nothing has been edited yet?)