We had a situation recently where a user was accidentally added with rights at the root folder level to our file server. This of course propagated down into every folder and file.
We are running Windows Server 2008 R2.
Basically I have 2 questions.
#1 - we have tried several times to delete this mistaken entry and it runs and runs going through the files but then at some point, it will lock up, and then users start having trouble accessing the file server (yes, it should have been done after hours). Any ideas why this might be happening? We are going to try it again after hours and disconnect clients from it and see if that makes any difference.
#2 - when it locks up and we killed the process of changing we got a message that read something like you have inconsistent permissions. Now the user's name is gone at the top level but he still has permissions in subfolders he shouldn't. Isn't there a program out there that will scan a folder structure and identify inconsistent permission issues? Things I am looking for would be like: Employee A is inheriting permissions from Folder B but user is not listed in parent folder Folder A. If I delete Employee A from Folder B it will not let me (unless I disable inheritance). One idea I had was add the user back to the root, propagate changes, then remove him again.
I've searched and searched but can't find a program that will do this. I probably can find a program that will show what he has permission too but I want to see the inconsistent permissions in case there are others.
Thank you in advance.