Hi. On one domain in a network where I work, we have a strange permissions issue. Normally users take ownership of their home directories, and they have sole permissions to acccess those directories. If an admin needs to access the directory, he assigns ownership to the Servername\Administrators group and gives Full Control to the Domain Admins group. On most domains this works no problem.

However, on a couple of servers in a particular domain, it is not possible to assign ownership to that server's Administrators group. Sometimes there is no option to assign to Administrators, and sometimes an error occurs saying "the security ID may not be assigned as the owner of this object." Why is this? The local administrators group has the setakeownership, serestore, and sebackup privileges.

Is this happening for the entire server or particular directories?

Are you using local admin accounts or a domain admin account?

Might want to check the account rights in your security policy. If the security policy has a specified deny then you still wouldn't be able to take ownership.

For particular directories:

This could happen if there's a problem with the files or file stucture. Since you don't have rights to see the files to check for conflicting information, the only thing I could suggest right now is to run chkdsk on the hard drives of those servers. Unfortunately this will require a reboot and won't run til your system boots up. Make sure you have a good backup.