Using Windows Restore Previous Versions Yields Error Due To Access Rights
This seems like a which came first, chicken or the egg situation...
I have a folder that I have been shadow coping for a while. This has been working great and restores have been a breeze when a user accidently delete something. Until now...
- DomainAdmin = Domain administrator who is part of the Domain Admin group.
- UserA = Low level user with next to no access.
- FolderA = A community folder used by all users to drop files into.
- FolderB = Single users folder that only they have access to.
Lets just keep this simple and say this folder contains 10 files. All 10 of these files have ACLs that include the DomainAdmin group with full access to the files with the exception of 2 files. These 2 files ONLY have ACLs for the specific user that made them (UserA).
So every 12 hours a shadow copy is being made of this folder (FolderA). I get a request to restore the folder because someone (UserA) has deleted their file in the folder (FolderA). I go to restore it like usual but then get the following error...
Interesting... So I go to open the shadow copy folder and see the file with the issue. I right click on it, go to properties and click the security tab to get this...
So I say OK... nothing new... I have seen this before. I just need to take ownership of the file then change the ACLs like I see fit... So when trying to do that I get this...
Well... This is my delima. It seems that the file is in a state of read-only. Not by some type of attribute but something different based on the way a shadow copy happens. I tried to just copy the shadow copy folder (so that I could reset all the permissions but I can't copy those files due to the lack of ACLs!
Ideas? Solutions?
windows-server-2008-r2 restore shadow-copy
edited Jan 20 '15 at 15:03
Ƭᴇcʜιᴇ007
99.3k14156216
asked Jan 20 '15 at 14:29
Arvo BowenArvo Bowen
2031414
add a comment |
This seems like a which came first, chicken or the egg situation...
I have a folder that I have been shadow coping for a while. This has been working great and restores have been a breeze when a user accidently delete something. Until now...
- DomainAdmin = Domain administrator who is part of the Domain Admin group.
- UserA = Low level user with next to no access.
- FolderA = A community folder used by all users to drop files into.
- FolderB = Single users folder that only they have access to.
Lets just keep this simple and say this folder contains 10 files. All 10 of these files have ACLs that include the DomainAdmin group with full access to the files with the exception of 2 files. These 2 files ONLY have ACLs for the specific user that made them (UserA).
So every 12 hours a shadow copy is being made of this folder (FolderA). I get a request to restore the folder because someone (UserA) has deleted their file in the folder (FolderA). I go to restore it like usual but then get the following error...
Interesting... So I go to open the shadow copy folder and see the file with the issue. I right click on it, go to properties and click the security tab to get this...
So I say OK... nothing new... I have seen this before. I just need to take ownership of the file then change the ACLs like I see fit... So when trying to do that I get this...
Well... This is my delima. It seems that the file is in a state of read-only. Not by some type of attribute but something different based on the way a shadow copy happens. I tried to just copy the shadow copy folder (so that I could reset all the permissions but I can't copy those files due to the lack of ACLs!
Ideas? Solutions?
windows-server-2008-r2 restore shadow-copy
edited Jan 20 '15 at 15:03
Ƭᴇcʜιᴇ007
99.3k14156216
asked Jan 20 '15 at 14:29
Arvo BowenArvo Bowen
2031414
While I agree it's weird, a good heads up, and an answer would be awesome, it kind of makes sense. They want you, as the Domain Admin, to manage their files for them and recover them to cover for their mistakes, but don't want you to have permissions to access the files. One o the other. If they want to be solely responsible for their own files, then get the users to restore it from their personal backup they made. ;)
– Ƭᴇcʜιᴇ007
Jan 20 '15 at 15:08
For an actual solution to your problem, just get the user to pull if form the shadow themselves. If that doesn't work, perhaps try giving the user Domain Admin permission long enough to pull the file from the shadow copy (as them)?
– Ƭᴇcʜιᴇ007
Jan 20 '15 at 15:09
@Ƭᴇcʜιᴇ007 Can the standard user pull from shadow copies themselves? I thought that was an admin only function. Good work around but I hope that work around is not the only way (giving domain admin creds). :)
– Arvo Bowen
Jan 20 '15 at 16:00
Users should be able to by default (depending on file/folder permissions), that's kind of the point -- so they don't have to bug IT to recover files. :)
– Ƭᴇcʜιᴇ007
Jan 20 '15 at 16:14
add a comment |
This seems like a which came first, chicken or the egg situation...
I have a folder that I have been shadow coping for a while. This has been working great and restores have been a breeze when a user accidently delete something. Until now...
- DomainAdmin = Domain administrator who is part of the Domain Admin group.
- UserA = Low level user with next to no access.
- FolderA = A community folder used by all users to drop files into.
- FolderB = Single users folder that only they have access to.
Lets just keep this simple and say this folder contains 10 files. All 10 of these files have ACLs that include the DomainAdmin group with full access to the files with the exception of 2 files. These 2 files ONLY have ACLs for the specific user that made them (UserA).
So every 12 hours a shadow copy is being made of this folder (FolderA). I get a request to restore the folder because someone (UserA) has deleted their file in the folder (FolderA). I go to restore it like usual but then get the following error...
Interesting... So I go to open the shadow copy folder and see the file with the issue. I right click on it, go to properties and click the security tab to get this...
So I say OK... nothing new... I have seen this before. I just need to take ownership of the file then change the ACLs like I see fit... So when trying to do that I get this...
Well... This is my delima. It seems that the file is in a state of read-only. Not by some type of attribute but something different based on the way a shadow copy happens. I tried to just copy the shadow copy folder (so that I could reset all the permissions but I can't copy those files due to the lack of ACLs!
Ideas? Solutions?
windows-server-2008-r2 restore shadow-copy
edited Jan 20 '15 at 15:03
Ƭᴇcʜιᴇ007
99.3k14156216
asked Jan 20 '15 at 14:29
Arvo BowenArvo Bowen
2031414
This seems like a which came first, chicken or the egg situation...
I have a folder that I have been shadow coping for a while. This has been working great and restores have been a breeze when a user accidently delete something. Until now...
- DomainAdmin = Domain administrator who is part of the Domain Admin group.
- UserA = Low level user with next to no access.
- FolderA = A community folder used by all users to drop files into.
- FolderB = Single users folder that only they have access to.
Lets just keep this simple and say this folder contains 10 files. All 10 of these files have ACLs that include the DomainAdmin group with full access to the files with the exception of 2 files. These 2 files ONLY have ACLs for the specific user that made them (UserA).
So every 12 hours a shadow copy is being made of this folder (FolderA). I get a request to restore the folder because someone (UserA) has deleted their file in the folder (FolderA). I go to restore it like usual but then get the following error...
Interesting... So I go to open the shadow copy folder and see the file with the issue. I right click on it, go to properties and click the security tab to get this...
So I say OK... nothing new... I have seen this before. I just need to take ownership of the file then change the ACLs like I see fit... So when trying to do that I get this...
Well... This is my delima. It seems that the file is in a state of read-only. Not by some type of attribute but something different based on the way a shadow copy happens. I tried to just copy the shadow copy folder (so that I could reset all the permissions but I can't copy those files due to the lack of ACLs!
Ideas? Solutions?
windows-server-2008-r2 restore shadow-copy
windows-server-2008-r2 restore shadow-copy
edited Jan 20 '15 at 15:03
Ƭᴇcʜιᴇ007
99.3k14156216
asked Jan 20 '15 at 14:29
Arvo BowenArvo Bowen
2031414
edited Jan 20 '15 at 15:03
Ƭᴇcʜιᴇ007
99.3k14156216
asked Jan 20 '15 at 14:29
Arvo BowenArvo Bowen
2031414
edited Jan 20 '15 at 15:03
Ƭᴇcʜιᴇ007
99.3k14156216
edited Jan 20 '15 at 15:03
Ƭᴇcʜιᴇ007
99.3k14156216
edited Jan 20 '15 at 15:03
Ƭᴇcʜιᴇ007
99.3k14156216
99.3k14156216
asked Jan 20 '15 at 14:29
Arvo BowenArvo Bowen
2031414
asked Jan 20 '15 at 14:29
Arvo BowenArvo Bowen
2031414
asked Jan 20 '15 at 14:29
Arvo BowenArvo Bowen
2031414
2031414
While I agree it's weird, a good heads up, and an answer would be awesome, it kind of makes sense. They want you, as the Domain Admin, to manage their files for them and recover them to cover for their mistakes, but don't want you to have permissions to access the files. One o the other. If they want to be solely responsible for their own files, then get the users to restore it from their personal backup they made. ;)
– Ƭᴇcʜιᴇ007
Jan 20 '15 at 15:08
For an actual solution to your problem, just get the user to pull if form the shadow themselves. If that doesn't work, perhaps try giving the user Domain Admin permission long enough to pull the file from the shadow copy (as them)?
– Ƭᴇcʜιᴇ007
Jan 20 '15 at 15:09
@Ƭᴇcʜιᴇ007 Can the standard user pull from shadow copies themselves? I thought that was an admin only function. Good work around but I hope that work around is not the only way (giving domain admin creds). :)
– Arvo Bowen
Jan 20 '15 at 16:00
Users should be able to by default (depending on file/folder permissions), that's kind of the point -- so they don't have to bug IT to recover files. :)
– Ƭᴇcʜιᴇ007
Jan 20 '15 at 16:14
add a comment |
While I agree it's weird, a good heads up, and an answer would be awesome, it kind of makes sense. They want you, as the Domain Admin, to manage their files for them and recover them to cover for their mistakes, but don't want you to have permissions to access the files. One o the other. If they want to be solely responsible for their own files, then get the users to restore it from their personal backup they made. ;)
– Ƭᴇcʜιᴇ007
Jan 20 '15 at 15:08
For an actual solution to your problem, just get the user to pull if form the shadow themselves. If that doesn't work, perhaps try giving the user Domain Admin permission long enough to pull the file from the shadow copy (as them)?
– Ƭᴇcʜιᴇ007
Jan 20 '15 at 15:09
@Ƭᴇcʜιᴇ007 Can the standard user pull from shadow copies themselves? I thought that was an admin only function. Good work around but I hope that work around is not the only way (giving domain admin creds). :)
– Arvo Bowen
Jan 20 '15 at 16:00
Users should be able to by default (depending on file/folder permissions), that's kind of the point -- so they don't have to bug IT to recover files. :)
– Ƭᴇcʜιᴇ007
Jan 20 '15 at 16:14
While I agree it's weird, a good heads up, and an answer would be awesome, it kind of makes sense. They want you, as the Domain Admin, to manage their files for them and recover them to cover for their mistakes, but don't want you to have permissions to access the files. One o the other. If they want to be solely responsible for their own files, then get the users to restore it from their personal backup they made. ;)
– Ƭᴇcʜιᴇ007
Jan 20 '15 at 15:08
While I agree it's weird, a good heads up, and an answer would be awesome, it kind of makes sense. They want you, as the Domain Admin, to manage their files for them and recover them to cover for their mistakes, but don't want you to have permissions to access the files. One o the other. If they want to be solely responsible for their own files, then get the users to restore it from their personal backup they made. ;)
– Ƭᴇcʜιᴇ007
Jan 20 '15 at 15:08
For an actual solution to your problem, just get the user to pull if form the shadow themselves. If that doesn't work, perhaps try giving the user Domain Admin permission long enough to pull the file from the shadow copy (as them)?
– Ƭᴇcʜιᴇ007
Jan 20 '15 at 15:09
For an actual solution to your problem, just get the user to pull if form the shadow themselves. If that doesn't work, perhaps try giving the user Domain Admin permission long enough to pull the file from the shadow copy (as them)?
– Ƭᴇcʜιᴇ007
Jan 20 '15 at 15:09
@Ƭᴇcʜιᴇ007 Can the standard user pull from shadow copies themselves? I thought that was an admin only function. Good work around but I hope that work around is not the only way (giving domain admin creds). :)
– Arvo Bowen
Jan 20 '15 at 16:00
@Ƭᴇcʜιᴇ007 Can the standard user pull from shadow copies themselves? I thought that was an admin only function. Good work around but I hope that work around is not the only way (giving domain admin creds). :)
– Arvo Bowen
Jan 20 '15 at 16:00
Users should be able to by default (depending on file/folder permissions), that's kind of the point -- so they don't have to bug IT to recover files. :)
– Ƭᴇcʜιᴇ007
Jan 20 '15 at 16:14
Users should be able to by default (depending on file/folder permissions), that's kind of the point -- so they don't have to bug IT to recover files. :)
– Ƭᴇcʜιᴇ007
Jan 20 '15 at 16:14
add a comment |
1 Answer
1
active
oldest
votes
Have the user to pull it form the shadow copy themselves via the "Previous Versions" tab.
If that doesn't work for some reason, perhaps try giving the user Domain Admin permission long enough to pull the file from the shadow copy (as them).
answered Jan 20 '15 at 16:31
Ƭᴇcʜιᴇ007Ƭᴇcʜιᴇ007
99.3k14156216
No luck. I tried all of those workarounds and I could not make it work. Seems as it stands right now the file in the shadow copy does not have ANY rights, none whatsoever. The owner is the domains Administrators group and that's it. Normally I would just take ownership of the file as a domain admin and then set the rights. But right now the shadow copy has it locked! No way out of the tunnel...
– Arvo Bowen
Jan 21 '15 at 13:01
add a comment |
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "3"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f867133%2fusing-windows-restore-previous-versions-yields-error-due-to-access-rights%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
Have the user to pull it form the shadow copy themselves via the "Previous Versions" tab.
If that doesn't work for some reason, perhaps try giving the user Domain Admin permission long enough to pull the file from the shadow copy (as them).
answered Jan 20 '15 at 16:31
Ƭᴇcʜιᴇ007Ƭᴇcʜιᴇ007
99.3k14156216
No luck. I tried all of those workarounds and I could not make it work. Seems as it stands right now the file in the shadow copy does not have ANY rights, none whatsoever. The owner is the domains Administrators group and that's it. Normally I would just take ownership of the file as a domain admin and then set the rights. But right now the shadow copy has it locked! No way out of the tunnel...
– Arvo Bowen
Jan 21 '15 at 13:01
add a comment |
Have the user to pull it form the shadow copy themselves via the "Previous Versions" tab.
If that doesn't work for some reason, perhaps try giving the user Domain Admin permission long enough to pull the file from the shadow copy (as them).
answered Jan 20 '15 at 16:31
Ƭᴇcʜιᴇ007Ƭᴇcʜιᴇ007
99.3k14156216
No luck. I tried all of those workarounds and I could not make it work. Seems as it stands right now the file in the shadow copy does not have ANY rights, none whatsoever. The owner is the domains Administrators group and that's it. Normally I would just take ownership of the file as a domain admin and then set the rights. But right now the shadow copy has it locked! No way out of the tunnel...
– Arvo Bowen
Jan 21 '15 at 13:01
add a comment |
Have the user to pull it form the shadow copy themselves via the "Previous Versions" tab.
If that doesn't work for some reason, perhaps try giving the user Domain Admin permission long enough to pull the file from the shadow copy (as them).
answered Jan 20 '15 at 16:31
Ƭᴇcʜιᴇ007Ƭᴇcʜιᴇ007
99.3k14156216
Have the user to pull it form the shadow copy themselves via the "Previous Versions" tab.
If that doesn't work for some reason, perhaps try giving the user Domain Admin permission long enough to pull the file from the shadow copy (as them).
answered Jan 20 '15 at 16:31
Ƭᴇcʜιᴇ007Ƭᴇcʜιᴇ007
99.3k14156216
answered Jan 20 '15 at 16:31
Ƭᴇcʜιᴇ007Ƭᴇcʜιᴇ007
99.3k14156216
answered Jan 20 '15 at 16:31
Ƭᴇcʜιᴇ007Ƭᴇcʜιᴇ007
99.3k14156216
answered Jan 20 '15 at 16:31
Ƭᴇcʜιᴇ007Ƭᴇcʜιᴇ007
99.3k14156216
99.3k14156216
No luck. I tried all of those workarounds and I could not make it work. Seems as it stands right now the file in the shadow copy does not have ANY rights, none whatsoever. The owner is the domains Administrators group and that's it. Normally I would just take ownership of the file as a domain admin and then set the rights. But right now the shadow copy has it locked! No way out of the tunnel...
– Arvo Bowen
Jan 21 '15 at 13:01
add a comment |
No luck. I tried all of those workarounds and I could not make it work. Seems as it stands right now the file in the shadow copy does not have ANY rights, none whatsoever. The owner is the domains Administrators group and that's it. Normally I would just take ownership of the file as a domain admin and then set the rights. But right now the shadow copy has it locked! No way out of the tunnel...
– Arvo Bowen
Jan 21 '15 at 13:01
No luck. I tried all of those workarounds and I could not make it work. Seems as it stands right now the file in the shadow copy does not have ANY rights, none whatsoever. The owner is the domains Administrators group and that's it. Normally I would just take ownership of the file as a domain admin and then set the rights. But right now the shadow copy has it locked! No way out of the tunnel...
– Arvo Bowen
Jan 21 '15 at 13:01
No luck. I tried all of those workarounds and I could not make it work. Seems as it stands right now the file in the shadow copy does not have ANY rights, none whatsoever. The owner is the domains Administrators group and that's it. Normally I would just take ownership of the file as a domain admin and then set the rights. But right now the shadow copy has it locked! No way out of the tunnel...
– Arvo Bowen
Jan 21 '15 at 13:01
add a comment |
Thanks for contributing an answer to Super User!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f867133%2fusing-windows-restore-previous-versions-yields-error-due-to-access-rights%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
While I agree it's weird, a good heads up, and an answer would be awesome, it kind of makes sense. They want you, as the Domain Admin, to manage their files for them and recover them to cover for their mistakes, but don't want you to have permissions to access the files. One o the other. If they want to be solely responsible for their own files, then get the users to restore it from their personal backup they made. ;)
– Ƭᴇcʜιᴇ007
Jan 20 '15 at 15:08
For an actual solution to your problem, just get the user to pull if form the shadow themselves. If that doesn't work, perhaps try giving the user Domain Admin permission long enough to pull the file from the shadow copy (as them)?
– Ƭᴇcʜιᴇ007
Jan 20 '15 at 15:09
@Ƭᴇcʜιᴇ007 Can the standard user pull from shadow copies themselves? I thought that was an admin only function. Good work around but I hope that work around is not the only way (giving domain admin creds). :)
– Arvo Bowen
Jan 20 '15 at 16:00
Users should be able to by default (depending on file/folder permissions), that's kind of the point -- so they don't have to bug IT to recover files. :)
– Ƭᴇcʜιᴇ007
Jan 20 '15 at 16:14