[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2716
  • Last Modified:

Permission denied on Sysvol

I am attempting to move our domain logon script from the Netlogon share into the logon scripts folder in one of our GPOs. However, when I attempt to move the script into the folder, I get a permission denied message. As an aside, I can also create a folder inside the GPO's logon scripts folder, but then cannot delete it.

I have looked at the security settings on the folder, and at first glance everything looks correct. Administrators, Domain Admins, and Enterprise Admins all have correct permissions (or at least the ability to create, delete, modify, etc files). When entering the Advanced Security dialog, I sometimes get a message about permissions being incorrectly ordered, and thus possibly not being applied correctly. But I again get a permission denied message when attempting to apply the correctly ordered permissions.

I am logged in as an Enterprise Admin, the DC I'm doing these operations on is a Windows 2008 box, but the oldest DC in the forest is still on Windows 2000 SP4, in case that has anything to do with it.

Thanks for ideas!
1 Solution
Have a look and see if you have UAC control checkbox enabled. If so uncheck it and try again.
DPS_ITAuthor Commented:
Yeesh... If it's not dealing with Windows Firewall on 2k8 Server, it's UAC. Thanks!

Featured Post

Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now