diff --git a/clients/cascades/session-logs/2026-07/2026-07-20-howard-rok7vnm-edge-download-fix.md b/clients/cascades/session-logs/2026-07/2026-07-20-howard-rok7vnm-edge-download-fix.md index 20f43b2f..6b04efb7 100644 --- a/clients/cascades/session-logs/2026-07/2026-07-20-howard-rok7vnm-edge-download-fix.md +++ b/clients/cascades/session-logs/2026-07/2026-07-20-howard-rok7vnm-edge-download-fix.md @@ -73,3 +73,43 @@ None discovered or created. - Edge version on ROK7VNM: 150.0.4078.83 - Datto AV version: 3.17.1.5606 (Endpoint Protection SDK 1.0.2510.6851) - Cascades M365 SKUs: SPB (Business Premium, 40/45 used), O365_BUSINESS_PREMIUM (Business Standard, 23/0 -- legacy) + +--- + +## Update: 14:48 PT -- Fleet-wide home folder ACL audit and fix + +### Summary + +After fixing Susan Hicks' permissions, Howard requested an audit of all Cascades user home folders on CS-SERVER (`D:\homes\*`) for the same broken inheritance issue. Wrote and ran an audit script that checked each user's subfolders for proper `CASCADES\:(OI)(CI)(F)` ACEs. + +### Audit Results + +| User | Status | Details | +|------|--------|---------| +| Ashley.Jensen | OK | Properly configured with `(OI)(CI)(F)` throughout | +| chris.knight | OK | | +| Crystal.Rodriguez | OK | | +| **lauren.hasselman** | BROKEN | Desktop had `(I)(F)` without `(OI)(CI)` | +| Lois.Lane | OK | | +| Megan.Hiatt | OK | | +| Nurses | OK | | +| **sharon.edwards** | BROKEN | All 7 subfolders (Documents, Downloads, Desktop, Music, Pictures, Videos, Favorites) missing inheritance | +| Susan.Hicks | OK | Fixed earlier this session | +| **zachary.nelson** | BROKEN | Desktop missing inheritance -- left unfixed per Howard's instruction | + +### Fixes Applied + +- **Sharon Edwards**: granted `CASCADES\Sharon.Edwards:(OI)(CI)(F)` on all 7 subfolders (Documents, Downloads, Desktop, Music, Pictures, Videos, Favorites). Documents and Downloads each took ~3-5 minutes due to file volume; the others completed quickly. +- **Lauren Hasselman**: granted `CASCADES\Lauren.Hasselman:(OI)(CI)(F)` on Desktop. +- **Zachary Nelson**: not fixed per Howard's explicit instruction. + +### Key Commands + +- Audit script staged as `C:\Windows\Temp\audit.ps1` on CS-SERVER, cmd ID `13242b0d` +- Sharon Documents fix: cmd ID `0dc0f4da` (took ~75s) +- Sharon Downloads fix: cmd ID `f410c7a8` (took ~5 min) +- Sharon Desktop + remaining + Lauren: cmd IDs `12bb4dd4`, `09ea3144` + +### Root Cause Note + +The broken inheritance pattern occurred because the parent `D:\homes\` folders were created with `CASCADES\:(F)` but without `(OI)(CI)` inheritance flags. Subfolders created after that only inherited from CREATOR OWNER, Administrators, and SYSTEM -- not the user's own ACE. Some users (Ashley.Jensen, chris.knight, etc.) had properly configured `(OI)(CI)(F)` on their parent, suggesting their folders were provisioned differently or fixed at some point.