Permission denied on Sysvol

Posted on 2009-04-20
Last Modified: 2012-05-06
I am attempting to move our domain logon script from the Netlogon share into the logon scripts folder in one of our GPOs. However, when I attempt to move the script into the folder, I get a permission denied message. As an aside, I can also create a folder inside the GPO's logon scripts folder, but then cannot delete it.

I have looked at the security settings on the folder, and at first glance everything looks correct. Administrators, Domain Admins, and Enterprise Admins all have correct permissions (or at least the ability to create, delete, modify, etc files). When entering the Advanced Security dialog, I sometimes get a message about permissions being incorrectly ordered, and thus possibly not being applied correctly. But I again get a permission denied message when attempting to apply the correctly ordered permissions.

I am logged in as an Enterprise Admin, the DC I'm doing these operations on is a Windows 2008 box, but the oldest DC in the forest is still on Windows 2000 SP4, in case that has anything to do with it.

Thanks for ideas!
Question by:DPS_IT
    LVL 2

    Accepted Solution

    Have a look and see if you have UAC control checkbox enabled. If so uncheck it and try again.

    Author Closing Comment

    Yeesh... If it's not dealing with Windows Firewall on 2k8 Server, it's UAC. Thanks!

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    6 Surprising Benefits of Threat Intelligence

    All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

    Suggested Solutions

    At least once a month I see a Question in one of the Windows Server related Zones asking about Best Practices for GPO Security.  I have been in IT for 20 years, and a Sys Ad for over 15.  I know this will sound cliché, but this is mostly a preferenc…
    Find out how to use Active Directory data for email signature management in Microsoft Exchange and Office 365.
    This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

    737 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    22 Experts available now in Live!

    Get 1:1 Help Now