Outcome

Completed a read-only audit of server01 F:\ for old zazzit ownership, missing Sam access, protected inheritance, and related ACL risk flags. No permissions were changed.

Scope

• F:\ top-level folders.
• F:\ SMB shares.
• One child level under flagged top-level folders.

Clean Findings

• Top-level folders audited: 7.
• One-level child items audited under flagged folders: 234.
• True non-system repair candidates: 2.
• Non-system watchlist items where Sam already has FullControl: 203.
• System/recycle-bin paths excluded from repair recommendation: 34.

True Repair Candidates

• F:\Closed Cases: owner CORP\zazzit; Sam has no explicit ACE; inheritance protected; zazzit ACE present.
• F:\Media Server\.DS_Store: owner CORP\zazzit; Sam already has FullControl; low-priority metadata file cleanup only.

Notes

• F:\Closed Cases is the only business top-level folder still owned by CORP\zazzit where Sam has no explicit ACE.
• F:\SFCA and sampled child folders show Sam FullControl; the repeated flag there is mostly missing explicit Administrators ACE, not a Sam access block.
• F:\$RECYCLE.BIN and F:\System Volume Information were excluded from repair recommendations because they are system/recycle paths.

Artifact Folder