Outcome

Removed remaining CORP\zazzit ACEs from the previously repaired roots only, after taking fresh ACL snapshots. Google Drive was not touched.

Scope

• server05 D:\Operations
• server05 D:\Employee Hub
• server01 F:\Closed Cases
• server-host G:\elc (Backup 12.28.25)

Result

• Fresh root/tree ACL snapshots were taken before removal.
• The first removal attempt passed the identities incorrectly and processed 0 files, so it made no effective removal.
• The corrected removal pass succeeded with exit code 0 for CORP\zazzit on all four roots.
• Final root ACL readback shows no zazzit/old-SID ACEs remaining on the four repaired roots.
• CORP\saguiar FullControl and BUILTIN\Administrators FullControl remain present on all four roots.

Verification

• \\server05\Operations: reachable.
• \\server05\Employee Hub: reachable.
• \\server01\Closed Cases: reachable; currently empty.
• \\server-host\elc (Backup 12.28.25): reachable.

Artifact Folder

C:\Users\SAguiar\Documents\Codex\permission_repairs\zazzit_ace_cleanup_repaired_roots_20260429_224147