azcomputerguru/claudetools
1
0
Fork 0
Code Issues 59 Pull Requests Actions Packages Projects Releases Wiki Activity

sync: auto-sync from HOWARD-HOME at 2026-07-20 14:49:36

Browse Source 
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-07-20 14:49:36
This commit is contained in:
Howard Enos
2026-07-20 14:50:03 -07:00
parent 415568a7f9
commit 47fa3b5f61
1 changed files with 40 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

40
clients/cascades/session-logs/2026-07/2026-07-20-howard-rok7vnm-edge-download-fix.md
View File

@@ -73,3 +73,43 @@ None discovered or created.
- Edge version on ROK7VNM: 150.0.4078.83
- Datto AV version: 3.17.1.5606 (Endpoint Protection SDK 1.0.2510.6851)
- Cascades M365 SKUs: SPB (Business Premium, 40/45 used), O365_BUSINESS_PREMIUM (Business Standard, 23/0 -- legacy)
---
## Update: 14:48 PT -- Fleet-wide home folder ACL audit and fix
### Summary
After fixing Susan Hicks' permissions, Howard requested an audit of all Cascades user home folders on CS-SERVER (`D:\homes\*`) for the same broken inheritance issue. Wrote and ran an audit script that checked each user's subfolders for proper `CASCADES\<user>:(OI)(CI)(F)` ACEs.
### Audit Results
| User | Status | Details |
|------|--------|---------|
| Ashley.Jensen | OK | Properly configured with `(OI)(CI)(F)` throughout |
| chris.knight | OK | |
| Crystal.Rodriguez | OK | |
| **lauren.hasselman** | BROKEN | Desktop had `(I)(F)` without `(OI)(CI)` |
| Lois.Lane | OK | |
| Megan.Hiatt | OK | |
| Nurses | OK | |
| **sharon.edwards** | BROKEN | All 7 subfolders (Documents, Downloads, Desktop, Music, Pictures, Videos, Favorites) missing inheritance |
| Susan.Hicks | OK | Fixed earlier this session |
| **zachary.nelson** | BROKEN | Desktop missing inheritance -- left unfixed per Howard's instruction |
### Fixes Applied
- **Sharon Edwards**: granted `CASCADES\Sharon.Edwards:(OI)(CI)(F)` on all 7 subfolders (Documents, Downloads, Desktop, Music, Pictures, Videos, Favorites). Documents and Downloads each took ~3-5 minutes due to file volume; the others completed quickly.
- **Lauren Hasselman**: granted `CASCADES\Lauren.Hasselman:(OI)(CI)(F)` on Desktop.
- **Zachary Nelson**: not fixed per Howard's explicit instruction.
### Key Commands
- Audit script staged as `C:\Windows\Temp\audit.ps1` on CS-SERVER, cmd ID `13242b0d`
- Sharon Documents fix: cmd ID `0dc0f4da` (took ~75s)
- Sharon Downloads fix: cmd ID `f410c7a8` (took ~5 min)
- Sharon Desktop + remaining + Lauren: cmd IDs `12bb4dd4`, `09ea3144`
### Root Cause Note
The broken inheritance pattern occurred because the parent `D:\homes\<user>` folders were created with `CASCADES\<user>:(F)` but without `(OI)(CI)` inheritance flags. Subfolders created after that only inherited from CREATOR OWNER, Administrators, and SYSTEM -- not the user's own ACE. Some users (Ashley.Jensen, chris.knight, etc.) had properly configured `(OI)(CI)(F)` on their parent, suggesting their folders were provisioned differently or fixed at some point.