An access control list, also known as an ACL, is a list of permissions attached to an object. The ACL may show permissions that are marked as having been inherited from the parent, but the parent itself may not have these permissions configured in its ACL.
The bad part is that this symptom may occur even though an inheritance is still activated. Any future change to the parent folder’s ACL causes the child’s ACL to receive the inherited permissions.
More so, any attempt to change the ACL of the child causes the inheritance to be applied automatically.
Given the apparent randomness of this issue, many users have already reported it happening to them as well. That is why we’ve created this article, to let you know why this happens and what you can do.
The main reason for this issue appearing is usually simply moving a folder somewhere else within the same volume. When you move a folder, the ACL is not changed, and the inherited permissions are not updated.
Even when the inheritance feature is enabled for this folder, the inherited permissions are not automatically updated. The ACL will be updated only if you manually, or even forcefully, change permissions, which will make the parent propagate its permissions.
Another reason for this issue happening is setting the permissions of a parent folder by using CACLS. This is because CACLS does not propagate to the subfolders.
Additionally, setting the permissions of a parent folder by using an API that does not automatically propagate inheritance can also cause this issue.
The last scenario that can lead to an inheritance issue is when you restore from a backup to a different location.
How do I fix the folder inheritance issues?
One way to avoid unexpected permission changes is to set the ACL of the file or folder to protected before moving when you want to keep the settings.
If you cannot do that, try to manually update the ACL of the moved file or folder by using the explorer ACL editor.
The next step would be to disable and then enable inheritance again. This will force the ACL to be updated with the right inherited permissions.
Note: If you know your way around VBScript, you can use it to automate this process.
By following these steps, you should no longer have issues with folders not inheriting permissions when you create them.
Note: At first glance, this issue may seem like something far beyond what a beginner can handle. However, by following these steps, you should handle them without any issues.
If you’re aware of another way to solve this problem, share it in the comments section below so that other users can try it, as well.
RELATED ARTICLES YOU SHOULD CHECK OUT: