We help IT Professionals succeed at work.

Local Access Denied to Domain Admin

1,297 Views
Last Modified: 2009-12-16
I ran a fresh Windows XP SP2 installation on a workstation.  During the install, I create a local account with an accompanying profile named MyLocalAccount.  I placed MyLocalAccount in the local Administrators group.  I then added the workstation to the domain.  I logged in to the workstation using my domain admin account, MyDomainAdminAccount.  I then attempted to open the profile associated with MyLocalAccount and I get an "Access is denied" message.  I don't get it.  I'm in the Domain Admins group, and I double-checked that the Domain Admins is in the local Administrators account.  Obviously, I can access the contents of the profile by logging in with MyLocalAccount, but I want to understand why MyDomainAdminAccount can't access the profile.  
Comment
Watch Question

Have you checked the ACL on the user's profile folder?
Unlikely but it spring to mind so I'll throw it out there -- is the profile folder encrypted?

How are trying to access the profile folder ... using what interface?

Author

Commented:
What does ACL stand for?  I'm simply using Windows Explorer.
I poked around a little after I posted the question.  Turns out that the local Administrators group had no permissions on the MyLocalAccount profile folder.  This seems bizarre.  Shouldn't the local Administrators group have full permissions to all profile folders by default?  
Unlock this solution and get a sample of our free trial.
(No credit card required)
UNLOCK SOLUTION
if you have admin rights on pc then you can take ownership of whatever you dont have rights to then give yourself rights to it....

Commented:
We are having the same problem on our new file server.  Can someone please tell me where this policy setting is?
Unlock the solution to this question.
Thanks for using Experts Exchange.

Please provide your email to receive a sample view!

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.