Solved

File Security issue after migrating files from Server 2003 to Server 2008

Posted on 2010-09-24
21
294 Views
Last Modified: 2012-05-10
Hi,
i just tried to migrate a Windows 2003 File Server to Windows 2008. I used the Microsoft File Server Migration tool to copy the files. The tool copies the files and i am able to access everything though the share but i don't have access locally from the server. I checked the Security setting and the local Administrators are granted "Full Access". The Domain admin which i belong to are member of the local administrator group.

Maybe somebody experienced this issue before.
Thanks,
0
Comment
Question by:ktpoitm
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 12
  • 9
21 Comments
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 33756442
Does someone have ownership of the file?
0
 
LVL 1

Author Comment

by:ktpoitm
ID: 33756456
Yes the local administrator group
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 33756464
So, the local Admin Group holds the ownership of the file? What error are you gettting when trying to access?
0
Revamp Your Training Process

Drastically shorten your training time with WalkMe's advanced online training solution that Guides your trainees to action.

 
LVL 1

Author Comment

by:ktpoitm
ID: 33756488
I try to access a Folder and files. If i try to access the Folder i get the following message:

You don't currently have permission to access this folder.
Click continue to permanently get access to this folder.

When i click continue it adds my account into the ACL, but i should already have right since I'm a member of the Admin group. I don't want to add all Admin manually.
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 33756499
Are you sure that your current account is part of the Local Admin group?
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 33756503
Here is the issue the Local Admin Group is not different then the other server you had these files on.
0
 
LVL 1

Author Comment

by:ktpoitm
ID: 33756511
I am a domain admin and the domain admins are part of the local admin group. Works fine with all other files and folder, just not with the files i migrated
0
 
LVL 1

Author Comment

by:ktpoitm
ID: 33756522
The old server name was Server03 the new one is Server21. It automatically changed the computer name when i migrated it
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 33756524
Local Admin group is different from the other local admin group so if the domain Admin Group is not attached to the files and folders you would have too add them since the local admin and local admin group are different from the prior server
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 33756530
Doesn't matter the SIDs are different that is why local users and groups can not migrate to other machines this is why a domain is so critical
0
 
LVL 1

Author Comment

by:ktpoitm
ID: 33756595
Ok i deleted the Local Administrators from the ACL and Added them back in. Still same result. Am i missing something ?
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 33756607
Go to Local Users and Groups go to Local Admin Group then check membership. Why are you adding local admin group and not the domain admin group?
0
 
LVL 1

Author Comment

by:ktpoitm
ID: 33756638
Usually the local admin group is automatically the owner and i don't have to do anything. But anyhow, i just added the domain admins to the ACL with Full access and still can't access the folder.

For some reason it seems to have a problem with the domain admin group
0
 
LVL 1

Author Comment

by:ktpoitm
ID: 33756769
When i add the Group Domain User to the ACL with Read access, i can access the folder. that makes no sense
0
 
LVL 1

Author Comment

by:ktpoitm
ID: 33771015
I tried to use Robocopy today for the file copy. Same result. As soon as i take the "Domain User" group out of the ACL and just add the "Domain Admin" i have no access to the folder/file
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 33771050
Are you using an account that is part of the domain admins? Are you sure?
0
 
LVL 1

Author Comment

by:ktpoitm
ID: 33771414
yes i double checked and my account is part of the domain admins.
0
 
LVL 1

Author Comment

by:ktpoitm
ID: 33801018
does someone has an idea what else to try? I'm out of luck
0
 
LVL 1

Author Comment

by:ktpoitm
ID: 33811338
The problem is somehow related to UAC. I turned UAC off and i can access the files/folder now.

Do i need UAC on a fileserver?
0
 
LVL 59

Accepted Solution

by:
Darius Ghassem earned 500 total points
ID: 33814962
UAC is not required and I disable it on certain servers like fileservers
0
 
LVL 1

Author Comment

by:ktpoitm
ID: 33820948
Thanks a lot for all your help.
0

Featured Post

When ransomware hits your clients, what do you do?

MSPs: Endpoint security isn’t enough to prevent ransomware.
As the impact and severity of crypto ransomware attacks has grown, Webroot fought back, not just by building a next-gen endpoint solution capable of preventing ransomware attacks but also by being a thought leader.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Samsung dvr sdr-5102n2t not working 7 59
Application of a group policy 11 72
domain controller shut down question 6 70
Active Directory GPOs and OUs 2 16
Most MSPs worth their salt are already offering cybersecurity to their customers. But cybersecurity as a service is wide encompassing and can mean many things.  So where are MSPs falling in this spectrum?
Keystroke loggers have been around for a very long time. While the threat is old, some of the remedies are new!
This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

759 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question