Domain Admin Rights on Server Shares

dlangman
dlangman used Ask the Experts™
on
I have a single windows 2003 server that is a domain controller. I have several shares setup on the server. I would assume that the users in the domain admin group should be able to access these shares (map to their profile) without having rights explicitly granted to them in share permissions. This does not seem to be the case. I can only map these shares to the domain admins if I explicitly grant that permission to the group. Is this expected behaviour? Anybody have any ideas on why this is happening?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Most Valuable Expert 2018
Distinguished Expert 2018
Commented:
That's totally normal behavior: no permissions, no access.
(Domain) Admins have means to change these permissions (and be it through taking ownership), but they need permissions like every other account.
Note that there's no use or added security when using *share* permissions. Share permissions are leftovers from OS/file systems without permissions management. Give the Everyone group Full access in the share permissions, and control the actual access with NTFS permissions.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial