Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

File Security issue after migrating files from Server 2003 to Server 2008

Posted on 2010-09-24
21
Medium Priority
?
306 Views
Last Modified: 2012-05-10
Hi,
i just tried to migrate a Windows 2003 File Server to Windows 2008. I used the Microsoft File Server Migration tool to copy the files. The tool copies the files and i am able to access everything though the share but i don't have access locally from the server. I checked the Security setting and the local Administrators are granted "Full Access". The Domain admin which i belong to are member of the local administrator group.

Maybe somebody experienced this issue before.
Thanks,
0
Comment
Question by:ktpoitm
  • 12
  • 9
21 Comments
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 33756442
Does someone have ownership of the file?
0
 
LVL 1

Author Comment

by:ktpoitm
ID: 33756456
Yes the local administrator group
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 33756464
So, the local Admin Group holds the ownership of the file? What error are you gettting when trying to access?
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
LVL 1

Author Comment

by:ktpoitm
ID: 33756488
I try to access a Folder and files. If i try to access the Folder i get the following message:

You don't currently have permission to access this folder.
Click continue to permanently get access to this folder.

When i click continue it adds my account into the ACL, but i should already have right since I'm a member of the Admin group. I don't want to add all Admin manually.
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 33756499
Are you sure that your current account is part of the Local Admin group?
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 33756503
Here is the issue the Local Admin Group is not different then the other server you had these files on.
0
 
LVL 1

Author Comment

by:ktpoitm
ID: 33756511
I am a domain admin and the domain admins are part of the local admin group. Works fine with all other files and folder, just not with the files i migrated
0
 
LVL 1

Author Comment

by:ktpoitm
ID: 33756522
The old server name was Server03 the new one is Server21. It automatically changed the computer name when i migrated it
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 33756524
Local Admin group is different from the other local admin group so if the domain Admin Group is not attached to the files and folders you would have too add them since the local admin and local admin group are different from the prior server
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 33756530
Doesn't matter the SIDs are different that is why local users and groups can not migrate to other machines this is why a domain is so critical
0
 
LVL 1

Author Comment

by:ktpoitm
ID: 33756595
Ok i deleted the Local Administrators from the ACL and Added them back in. Still same result. Am i missing something ?
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 33756607
Go to Local Users and Groups go to Local Admin Group then check membership. Why are you adding local admin group and not the domain admin group?
0
 
LVL 1

Author Comment

by:ktpoitm
ID: 33756638
Usually the local admin group is automatically the owner and i don't have to do anything. But anyhow, i just added the domain admins to the ACL with Full access and still can't access the folder.

For some reason it seems to have a problem with the domain admin group
0
 
LVL 1

Author Comment

by:ktpoitm
ID: 33756769
When i add the Group Domain User to the ACL with Read access, i can access the folder. that makes no sense
0
 
LVL 1

Author Comment

by:ktpoitm
ID: 33771015
I tried to use Robocopy today for the file copy. Same result. As soon as i take the "Domain User" group out of the ACL and just add the "Domain Admin" i have no access to the folder/file
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 33771050
Are you using an account that is part of the domain admins? Are you sure?
0
 
LVL 1

Author Comment

by:ktpoitm
ID: 33771414
yes i double checked and my account is part of the domain admins.
0
 
LVL 1

Author Comment

by:ktpoitm
ID: 33801018
does someone has an idea what else to try? I'm out of luck
0
 
LVL 1

Author Comment

by:ktpoitm
ID: 33811338
The problem is somehow related to UAC. I turned UAC off and i can access the files/folder now.

Do i need UAC on a fileserver?
0
 
LVL 59

Accepted Solution

by:
Darius Ghassem earned 2000 total points
ID: 33814962
UAC is not required and I disable it on certain servers like fileservers
0
 
LVL 1

Author Comment

by:ktpoitm
ID: 33820948
Thanks a lot for all your help.
0

Featured Post

Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Experts Exchange expands question security options for members.
It’s a season to be thankful, and we’re thankful for users like you who engage on site, solve technology problems, and network with others in the industry. What tech are we most thankful for? Keep reading.
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

876 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question