I have a 2008 R2 server that is part of a cluster. We are adding new mounts point due to a lack of drive letters. Even if I am logged on as the local administrator and run Disk Administrator or Windows Explorer as an administrator, I can not set new mount point permissions without receiving access denied errors. I can open the second security tab under the mount point. I can add the groups I want, but when I go to apply the change it hangs and I have to go into task manager and force the properties GUI to close. If I re-open the mount point properties, it appears that the changes are there, but I don't know if they are valid. I simply want the root of the mount point permissions to be the same as the folder permissions that sit above it.
ICACLS has the /L switch, but when you use it, it only adds permissions to the file folder not the actual mount point. It looks like an old work around with CACLS was to add the volume with a drive letter, set the permissions and them remove and add it back as a mount point. I would think that by 2008 R2, Microsoft would have a fix for this. The other option is to have the root volume set up with generic permissions so that everyone has read and list access, then create a sub folder to share out, and use NTFS rights on those sub folders to set user permissions. Am I missing the point, should one not be concerned about the mount point permissions. If one is suppose to set them, how do you do it with receiving access denied messages and having the properties GUI freeze?