Issue - This security ID may not be assigned as the owner object

[Adam Raff]

Good Afternoon,

this is a little hard to explain but I will do my best.

We have a directory that is setup by year (2006, 2007, 2008) and to make it
simple I created a batch file that invokes xcopy to copy a directory called
template into the 2008 directory. The user then goes into the 2008
directory and renames it. This has worked for some time but now I need to
add some files to the template and I noticed something.

The user who does this is named Jane. If the directories is not created on
her system and even the template is not created on her system the batch file
stops and I get the following error in DOS (command prompt) when I watch it
execute.

This security ID may not be assigned as the owner object.

I was working on a test version of the template and I moved stuff around.
When this happened and I noticed this before and just created the stuff on
her system every year and it worked but this time I decided to try some
other stuff and when I got the error I went into the directories and while
sitting at her desk and logged in as her took ownership of the directories.
This did not help. I know it's some sort of permission issue but I just
can't figure it out.

If anybody knows how to get around this it would be a great help

Thanks
Adam Raff

[Miles Li [MSFT]]

Hello Adam,

The error message "This security ID may not be assigned as the owner
object" typically indicates that the owner of a new object is not the one
of the users or groups that have been given the right to assign as the
owner.

From my test, you may use "XCOPY -o" (-o parameters: Copies files with
ownership and ACL information.) in the batch file. This will make users
copy template directory with original ownership instead of setting a new
owner.

To resolve this issue, try to move the -o parameters in the batch file to
set the user that run the XCOPY command as the new owner.

If the practise above doesn't work, please give the verbose file structure
and ACLs of the folder in your environment to enable me to reproduce the
error.

Error Message: This security ID may not be assigned as the owner of this
object.
http://www.microsoft.com/technet/pro...eskit/w2000Msg
s/3868.mspx

Hope it helps.


Sincerely,
Miles Li

Microsoft Online Partner Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

[Miles Li [MSFT]]

Hello Adam,

I am currently standing by for further update from you and would like to
know how things are going. If you have any questions or concerns on the
recent information I've provided you, please don't hesitate to let me know.


Sincerely,
Miles Li

Microsoft Online Partner Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

[Rinze]

Hello Miles,
I have a similar problem with calling a batch file from a vba-script.
I don't know exactly what you mean by "try to move the -o parameters in the batch file to set the user that run the XCOPY command as the new owner".
Can you explain??

Many Thanks
Rinze Smit
Revalidatie Friesland (NL)