Solved

File Security issue after migrating files from Server 2003 to Server 2008

Posted on 2010-09-24
21
289 Views
Last Modified: 2012-05-10
Hi,
i just tried to migrate a Windows 2003 File Server to Windows 2008. I used the Microsoft File Server Migration tool to copy the files. The tool copies the files and i am able to access everything though the share but i don't have access locally from the server. I checked the Security setting and the local Administrators are granted "Full Access". The Domain admin which i belong to are member of the local administrator group.

Maybe somebody experienced this issue before.
Thanks,
0
Comment
Question by:ktpoitm
  • 12
  • 9
21 Comments
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 33756442
Does someone have ownership of the file?
0
 
LVL 1

Author Comment

by:ktpoitm
ID: 33756456
Yes the local administrator group
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 33756464
So, the local Admin Group holds the ownership of the file? What error are you gettting when trying to access?
0
 
LVL 1

Author Comment

by:ktpoitm
ID: 33756488
I try to access a Folder and files. If i try to access the Folder i get the following message:

You don't currently have permission to access this folder.
Click continue to permanently get access to this folder.

When i click continue it adds my account into the ACL, but i should already have right since I'm a member of the Admin group. I don't want to add all Admin manually.
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 33756499
Are you sure that your current account is part of the Local Admin group?
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 33756503
Here is the issue the Local Admin Group is not different then the other server you had these files on.
0
 
LVL 1

Author Comment

by:ktpoitm
ID: 33756511
I am a domain admin and the domain admins are part of the local admin group. Works fine with all other files and folder, just not with the files i migrated
0
 
LVL 1

Author Comment

by:ktpoitm
ID: 33756522
The old server name was Server03 the new one is Server21. It automatically changed the computer name when i migrated it
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 33756524
Local Admin group is different from the other local admin group so if the domain Admin Group is not attached to the files and folders you would have too add them since the local admin and local admin group are different from the prior server
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 33756530
Doesn't matter the SIDs are different that is why local users and groups can not migrate to other machines this is why a domain is so critical
0
6 Surprising Benefits of Threat Intelligence

All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

 
LVL 1

Author Comment

by:ktpoitm
ID: 33756595
Ok i deleted the Local Administrators from the ACL and Added them back in. Still same result. Am i missing something ?
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 33756607
Go to Local Users and Groups go to Local Admin Group then check membership. Why are you adding local admin group and not the domain admin group?
0
 
LVL 1

Author Comment

by:ktpoitm
ID: 33756638
Usually the local admin group is automatically the owner and i don't have to do anything. But anyhow, i just added the domain admins to the ACL with Full access and still can't access the folder.

For some reason it seems to have a problem with the domain admin group
0
 
LVL 1

Author Comment

by:ktpoitm
ID: 33756769
When i add the Group Domain User to the ACL with Read access, i can access the folder. that makes no sense
0
 
LVL 1

Author Comment

by:ktpoitm
ID: 33771015
I tried to use Robocopy today for the file copy. Same result. As soon as i take the "Domain User" group out of the ACL and just add the "Domain Admin" i have no access to the folder/file
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 33771050
Are you using an account that is part of the domain admins? Are you sure?
0
 
LVL 1

Author Comment

by:ktpoitm
ID: 33771414
yes i double checked and my account is part of the domain admins.
0
 
LVL 1

Author Comment

by:ktpoitm
ID: 33801018
does someone has an idea what else to try? I'm out of luck
0
 
LVL 1

Author Comment

by:ktpoitm
ID: 33811338
The problem is somehow related to UAC. I turned UAC off and i can access the files/folder now.

Do i need UAC on a fileserver?
0
 
LVL 59

Accepted Solution

by:
Darius Ghassem earned 500 total points
ID: 33814962
UAC is not required and I disable it on certain servers like fileservers
0
 
LVL 1

Author Comment

by:ktpoitm
ID: 33820948
Thanks a lot for all your help.
0

Featured Post

Free book by J.Peter Bruzzese, Microsoft MVP

Are you using Office 365? Trying to set up email signatures but you’re struggling with transport rules and connectors? Let renowned Microsoft MVP J.Peter Bruzzese show you how in this exclusive e-book on Office 365 email signatures. Better yet, it’s free!

Join & Write a Comment

Suggested Solutions

If you're not part of the solution, you're part of the problem.   Tips on how to secure IoT devices, even the dumbest ones, so they can't be used as part of a DDoS botnet.  Use PRTG Network Monitor as one of the building blocks, to detect unusual…
This article explains in simple steps how to renew expiring Exchange Server Internal Transport Certificate.
This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now