OK so this is driving me Crazy,
Heres the Scenario. We were infected with CryptoXXX no worries caught it early and damage was not severe. We restored all folders from backup of the day before. Our File Server is 2008 standard. most if not all of the shares broke. After we went through and manually reset the permissions on the shares Permissions assigned to Groups do not apply, only explicit permissions to username seems to apply correctly.
ICACLS shows
CREATOR OWNER:(OI)(CI)(IO)(F)
NT AUTHORITY\SYSTEM:(OI)(CI)(F)
XXX\Administrator:(OI)(CI)(F)
XXX\Domain Admins:(OI)(CI)(F)
XXX\user1:(OI)(CI)(M)
XXX\Group1:(OI)(CI)(F)
CACLS Shows
CREATOR OWNER:(OI)(CI)(IO)F
NT AUTHORITY\SYSTEM:(OI)(CI)F
XXX\Administrator:(OI)(CI)F
XXX\Domain Admins:(OI)(CI)F
XXX\user1:(OI)(CI)C
XXX\group1:(OI)(CI)F
User1 is a member of Group1 but if i remove the explicit...