Permissions won't cascade more than 1 level

Question

Running Windows Small Business Server 2011

I have a file structure with a lot of sub folders (sometimes 5-6 levels deep). I have created access groups to grant access to my users, and also deny groups to deny access to others.

X Access & X Deny. These allow or deny access to a mapped network drive X:

On the server I put in the groups with Full Control Allow for X Access and Full Control Deny for X Deny, I also tick the box "Apple these permissions to objects and/or containers within this container only" and have ensured that "Apply to:" is "This folder, subfolders and files".

But for some reason the permissions will only apply to the next level of folders & files.

ex. structure:

X:

Folder 1

Folder 1a

Folder 2

Folder 2a

If I apply the permissions to X: it'll only go to Folder 1 & 2, not 1a and 2a, I then need to manually apply the permissions to these too.

Is this working as intended or am I doing something wrong?

Solution 1

Depending on how you created your directory structure, you might have broken inheritance for some of your subdirectories. In this case, you should use the "reset permissions on all child objects and enable propagation" check box in the Advanced Access Control Settings dialog:

After doing this, you should see inheritance working again.

If you are not able to change ACLs due to permission restrictions, consider seizing ownership for X: and all files and subdirectories.

Solution 2

From the parent folder, Security Tab, "Advanced", highlight a user/group, "View/Edit" button. A dialog opens.

DO NOT TICK BOX for "Apply these permissions to objects and/or containers within this container only".

Comments

[Zoredache]

It might be helpful if you posted the output of cacls directory for each directory.

[Jovin J]

This somewhat was the issue. I needed to go and add the group to the permissions in the standard permissions box, then go into advanced and check "Reset permissions...".

[Dave M]

Where does this check box exist? Accepted answer shows solution. Can you add details to your answer?

[David Balažic]

@DaveM The check box is in the "Add permission" dialog. When you are adding the permissions. The option "Apply these permissions to ..." is actually "Do this recursively for all sub/sub/sub... folders". Instead of just the current folder. And it is negated. See technet.microsoft.com/en-us/library/cc771309.aspx The action in the other answer just resets this setting after the fact.