I'm trying to copy the contents of a directory off a server I am decommissioning, and I am running into permissions errors. Whoever set it up created a particular directory tree with some heavily customized permissions. Unfortunately, they removed the Administrators group from the ACL, and I am unable to browse the directory tree.
When I open one of the folders, I get prompted to gain access, but it then gives me an access denied when I answer 'Yes'. I can't even view the ACL on the directory. I contacted a user who has some access to that share, but they only have access to some subfolders and they don't have full control. The only account with the "Full Control" permission is a naked SID, so I'm guessing it's the former admin who set this up, who hasn't worked here in years.
I'm logged into the server with a domain admin account, so I could just take ownership of the whole tree. The problem is that if I do that, the ACLs that are currently on it will be destroyed. Nobody even knows what's in these folders, and I don't want to break things.
Is there a way to take ownership and add just the Administrators group (or even my own account) to the ACLs without completely replacing the entire permissions structure?