I am System Administrator on Windows Server 2008 R2.
When i try to grant Security Permissions to folders that on the server, some folders successfully got the permissions (along with error display that "Access Denied" Even though i System Administrator) while the other folders that in that folder just dont get them.
Same thing happens to files that in those folders.
We try to figure this out, maybe someone gave any DENY permission, or maybe user ownership blocks it, but we did not succeed.
The only way that work for me way: to go each folder and file and grant it local administrator ownership, and then i can grant Security Permissions.
But, it is not the way its should be.
Top Most Folder > Properties > Security > Advanced
there should be a checkbox on the bottom called something likeReplace all authorization entries for subordinate objects with inheritable authorization entries from this object
. Check this box and hit OK. Sadly I don't have a 2008 R2 to test this, but it's like this on Server 2012 R2Takeown
command. If you run that as domain admin and grant ownership to domain admin it could work.