sync: auto-sync from HOWARD-HOME at 2026-07-20 14:49:36

Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-07-20 14:49:36

clients/cascades/session-logs/2026-07/2026-07-20-howard-rok7vnm-edge-download-fix.md

@@ -73,3 +73,43 @@ None discovered or created.
 - Edge version on ROK7VNM: 150.0.4078.83
 - Datto AV version: 3.17.1.5606 (Endpoint Protection SDK 1.0.2510.6851)
 - Cascades M365 SKUs: SPB (Business Premium, 40/45 used), O365_BUSINESS_PREMIUM (Business Standard, 23/0 -- legacy)
+
+---
+
+## Update: 14:48 PT -- Fleet-wide home folder ACL audit and fix
+
+### Summary
+
+After fixing Susan Hicks' permissions, Howard requested an audit of all Cascades user home folders on CS-SERVER (`D:\homes\*`) for the same broken inheritance issue. Wrote and ran an audit script that checked each user's subfolders for proper `CASCADES\<user>:(OI)(CI)(F)` ACEs.
+
+### Audit Results
+
+| User | Status | Details |
+|------|--------|---------|
+| Ashley.Jensen | OK | Properly configured with `(OI)(CI)(F)` throughout |
+| chris.knight | OK | |
+| Crystal.Rodriguez | OK | |
+| **lauren.hasselman** | BROKEN | Desktop had `(I)(F)` without `(OI)(CI)` |
+| Lois.Lane | OK | |
+| Megan.Hiatt | OK | |
+| Nurses | OK | |
+| **sharon.edwards** | BROKEN | All 7 subfolders (Documents, Downloads, Desktop, Music, Pictures, Videos, Favorites) missing inheritance |
+| Susan.Hicks | OK | Fixed earlier this session |
+| **zachary.nelson** | BROKEN | Desktop missing inheritance -- left unfixed per Howard's instruction |
+
+### Fixes Applied
+
+- **Sharon Edwards**: granted `CASCADES\Sharon.Edwards:(OI)(CI)(F)` on all 7 subfolders (Documents, Downloads, Desktop, Music, Pictures, Videos, Favorites). Documents and Downloads each took ~3-5 minutes due to file volume; the others completed quickly.
+- **Lauren Hasselman**: granted `CASCADES\Lauren.Hasselman:(OI)(CI)(F)` on Desktop.
+- **Zachary Nelson**: not fixed per Howard's explicit instruction.
+
+### Key Commands
+
+- Audit script staged as `C:\Windows\Temp\audit.ps1` on CS-SERVER, cmd ID `13242b0d`
+- Sharon Documents fix: cmd ID `0dc0f4da` (took ~75s)
+- Sharon Downloads fix: cmd ID `f410c7a8` (took ~5 min)
+- Sharon Desktop + remaining + Lauren: cmd IDs `12bb4dd4`, `09ea3144`
+
+### Root Cause Note
+
+The broken inheritance pattern occurred because the parent `D:\homes\<user>` folders were created with `CASCADES\<user>:(F)` but without `(OI)(CI)` inheritance flags. Subfolders created after that only inherited from CREATOR OWNER, Administrators, and SYSTEM -- not the user's own ACE. Some users (Ashley.Jensen, chris.knight, etc.) had properly configured `(OI)(CI)(F)` on their parent, suggesting their folders were provisioned differently or fixed at some point.