Permissions won't cascade more than 1 level

Running Windows Small Business Server 2011

I have a file structure with a lot of sub folders (sometimes 5-6 levels deep). I have created access groups to grant access to my users, and also deny groups to deny access to others.

X Access & X Deny. These allow or deny access to a mapped network drive X:

On the server I put in the groups with Full Control Allow for X Access and Full Control Deny for X Deny, I also tick the box "Apple these permissions to objects and/or containers within this container only" and have ensured that "Apply to:" is "This folder, subfolders and files".

But for some reason the permissions will only apply to the next level of folders & files.

ex. structure:

X:

Folder 1

Folder 1a

Folder 2

Folder 2a

If I apply the permissions to X: it'll only go to Folder 1 & 2, not 1a and 2a, I then need to manually apply the permissions to these too.

Is this working as intended or am I doing something wrong?

Solution 1:

Depending on how you created your directory structure, you might have broken inheritance for some of your subdirectories. In this case, you should use the "reset permissions on all child objects and enable propagation" check box in the Advanced Access Control Settings dialog:

After doing this, you should see inheritance working again.

If you are not able to change ACLs due to permission restrictions, consider seizing ownership for X: and all files and subdirectories.

Solution 2:

From the parent folder, Security Tab, "Advanced", highlight a user/group, "View/Edit" button. A dialog opens.

DO NOT TICK BOX for "Apply these permissions to objects and/or containers within this container only".