Error: The permissions on <directory> are incorrectly ordered, which may cause some entries to be ineffective.
https://support.hpe.com/hpesc/public/docDisplay?docId=emr_na-c00810470
ISSUE: The following error is generated on a Windows system when opening theSecurity tab on some folders:
” The permissions on <folder> are incorrectly ordered, which may cause some entries to be ineffective. Press OK to continue and sort the permissions correctly, or Cancel to reset the permissions.”
Why does this “permissions” error occur and how can it be resolved?
SOLUTION: This issue may occur for various reasons; one is that Windows 2000introduced a new inheritance model in which directly applied accesscontrol entries (ACEs) have precedence over inherited ACEs. Thecomputer implements this precedence by placing directly appliedACEs ahead of inherited ACEs in a discretionary access controllist (DACL). Earlier versions of Microsoft Windows NT did notdistinguish between inherited and directly applied ACEs but Windows2000 does, so migrated filesystems may result in this issue beingidentified by the operating system.
To resolve this “permissions” error for a large filesystem, it isnecessary to get the operating system to reapply permissions back toall the affected files and folders.
In this case, a particular folder tree was impacted. The number offiles/folders contained within this folder tree will determine whichone of the following is the best approach:
- Access permissions on the file/folder object in the impacted folder tree and select OK on the “incorrectly ordered” error message. This approach may be time consuming if there are many files and folders in the folder tree.
- Apply new permissions generally across the folder tree by using the Advanced option on the Security tab of the parent folder for the impacted folder tree and add a new security entry including this option:”Replace permission entries on all child objects with entries shown here that apply to child objects.”This will force all the permissions on the underlying folders/ files to be changed to match those of the parent folder.NOTE: This is the easiest approach but it may be considered dangerous for large file systems where specific permissions have been applied for use by a specific application.