• The Storage Team (who did the drive copy) said all drive and folder permissions would be copied.

    I just checked and the local administrators group has full control to the drive and all folders.

    The service id is in the administrators group. If the name of the file in question is logged somewher

    that would give a hint. I can't find a log that has that.