[Resolved] After upgrade, getting ERROR_ACCESS_DENIED: Access is denied. [SetFileSecurity]

Get help for specific problems
Posts: 14
Joined: 17 Aug 2020

mwffs3

After upgrading to 11.17 (from - I think - 11.14), I'm hitting some permissions errors syncing files from Windows (Server 2016) to a TrueNAS (ver 12.0u8 - recently upgraded from 11.3) CIFS/SMB share.

I'm running FFS the same way I was with the old version - in fact using the same config files. I have the "Copy DACL, SACL, Owner, Group" option enabled (the file ACLs are critical to my application), and running as Administrator with elevated privs.

Post-upgrade, I'm hitting multiple permissions problems:

ERROR_ACCESS_DENIED: Access is denied. [SetFileSecurity]

I am able to manually create a file or dir in the same place that FFS complains about using the same account.

Anyone else run across this? Any ideas to help troubleshoot very much appreciated.

Thanks!
User avatar
Posts: 4055
Joined: 11 Jun 2019

xCSxXenon

That setting is not tied to config files, it is for FFS. Make sure it is still enabled.
Posts: 14
Joined: 17 Aug 2020

mwffs3

Yes, it is still enabled. Program settings appear to have carried over to the new version.
User avatar
Posts: 4055
Joined: 11 Jun 2019

xCSxXenon

If you are running FFS as admin, you may not be using the same account the way you think you are. What if you try version 11.14 again?
Posts: 14
Joined: 17 Aug 2020

mwffs3

Thanks for the replies; this is now resolved.

The problem was with TrueNAS (actually Samba) and not FreeFileSync.

Apparently the new version of Samba that TrueNAS 12 ships with doesn't allow unresolvable Windows ACL SIDs. I had some files and directories with SIDs leftover from an old domain trust. Older versions of Samba must have just ignored these, but the new version won't permit setting them. Once I cleaned the ACLs by removing the old SIDs, all was well again.

Posting in case it helps someone else.

Thanks!
User avatar
Posts: 4055
Joined: 11 Jun 2019

xCSxXenon

Gotta love Samba issues lmao