We help IT Professionals succeed at work.

We've partnered with Certified Experts, Carl Webster and Richard Faulkner, to bring you two Citrix podcasts. Learn about 2020 trends and get answers to your biggest Citrix questions!Listen Now

x

Shared folder permission issue on Windows 2008

Medium Priority
1,134 Views
Last Modified: 2013-12-02
I have an existing Windows 2003 domain. We just recently added our first Windows 2008 Domain Controller to the domain. I log into the new server with the account test.admin, which is a member of the Domain Admins group. I create a folder named "test", and then go into the security settings for this folder. I remove inheritable permissions, so permissions area is completely blank. I then add "Domain Admins" and give it full control. I also add "Administrators" and give that full control as well. I apply, hit okay and close out of the properties window.

At this point, if I try to access the folder I receive the following error message: "You don't currently have permissions to access this folder. Click Continue to get access to this folder."

Clicking continue adds test.admin with read and view permissions onto the folder, and then it opens. Clicking cancel and nothing further happens.

What is going on? These exact permissions work on 2k3 servers, and I clearly should have access rights since Domain Admins has full control.
Comment
Watch Question

Commented:
Hi,
You say that you try to access this folder...  Are you trying to access it over the network or locally via console/RDP?

If network, then ensure that the everyone group is included on the share with change permissions, and then your security will do the rest as it will NOT allow the everyone group in, but just give permissions to domain admins and local admins as the security tab fine tunes the share.

HTH

Author

Commented:
I am remoted into the server via RDP. I try to access by double clicking the file in the explorer window. It is not a shared folder, just a normal folder that I have created.
Commented:
Oh, in that case disable UAC

Follow this guide:

http://www.trainsignaltraining.com/disable-uac-user-account-control-on-vista-and-server-2008/2008-12-18/

Go to the bottom where it says to use MSCONFIG.

This will fix you, but you will need to restart the server.  Also you can do a runas command to get around UAC before you restart.

HTH

Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts
CERTIFIED EXPERT
Distinguished Expert 2019

Commented:
I don't know what UAC could have to do with this. Fits, make sure your test.admin can fulfil other administrative tasks like enabling/disabling a device in device manager for example.

Author

Commented:
UAC did the trick, although I don't understand why. What effect does UAC have on the file permissions? Can you point me in a direction to further reading on this? I read what I could on UAC and didn't see anything that related to NTFS permissions.
Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.