• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 345
  • Last Modified:

Users profile - Access is denied

Hi all,

I'm having a problem with security on our main file and print server. I am a member of the Administrator Group on the server but when I try to access a users profile which is on the D: drive of the server I get 'Access is denied'. If I log into the server as the local administrator i can access the profiles without a problem.

Is there a group I am missing from?

I can however take ownership of the profile and then configure the folder to give me access but I was wondering if there is anything that I can do to remove this step,

thanks,

0
aruphelp
Asked:
aruphelp
  • 5
  • 3
1 Solution
 
Jay_Jay70Commented:
Hi aruphelp,

admin is the highest priviliged as you would know if you are a member and it still dun work then you have to take ownership

Cheers!
0
 
TheCleanerCommented:
You are trying to access remotely right?  By default it probably has "DOMAIN ADMINS" in the security permissions, but not "Administrators".  You are able to access it locally because you are going straight to the D drive and not the share itself, and the local admin has full rights to all of the actual drives (C$, D$, etc.)...

Check the NTFS permissions.  Either you'll need to be a part of the domain admins group, or you'll need to add \\SERVER\Administrators as having Full Control of those files/folders inside the share.  Don't forget to make sure the Share permissions are set right as well.
0
 
aruphelpAuthor Commented:
Hi there,

Thanks for getting back to me so soon...

'TheCleaner'

I have checked all the NTFS permissions on both the share and folder permissions. the group \\server\administrators is already in them so i can't understand why this is happennig.

I am a member of a group called 'office administrators' and that group has been added the the administrators group on the server, I am not a domain admin as I only have administrator rights for my office,

any ideas?
0
Free recovery tool for Microsoft Active Directory

Veeam Explorer for Microsoft Active Directory provides fast and reliable object-level recovery for Active Directory from a single-pass, agentless backup or storage snapshot — without the need to restore an entire virtual machine or use third-party tools.

 
TheCleanerCommented:
Can you list out here what the share permissions are, and the NTFS permissions for both the root of the share and the actual user profile folder?

Make sure that \\server\administrators has Full Control at both the share level and the NTFS level in both instances, and make sure there are not any DENY privileges set.

0
 
TheCleanerCommented:
btw, can you access it ok from \\server\d$ then browsing to the user profile?
0
 
aruphelpAuthor Commented:
Hi,

No i've tried the d$ share but that didn't work either. I've just spoken to one of our other office IT Managers and apparently he has the same problem too. It must be something to do with us not having domain admin rights. It only seems to happen when we create new users.

Any thoughts?
0
 
TheCleanerCommented:
If you can't reach it via D$ then you aren't an administrator or in the administrators group on the server.  You need to really verify your group memberships and "nesting" of those groups.  Log in locally on the server and add your domain account to the administrators group.  If that works, then something is wrong with the "office administrators" group somehow.
0
 
aruphelpAuthor Commented:
Hi,

No I can access the d$ share. The profiles folder is in there also. I think i will remove all permissions then try again but thanks anyway...
0
 
TheCleanerCommented:
ok, best of luck.
0

Featured Post

Veeam Disaster Recovery in Microsoft Azure

Veeam PN for Microsoft Azure is a FREE solution designed to simplify and automate the setup of a DR site in Microsoft Azure using lightweight software-defined networking. It reduces the complexity of VPN deployments and is designed for businesses of ALL sizes.

  • 5
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now