Solved

SBS Admin account can't access shares

Posted on 2010-11-10
4
722 Views
Last Modified: 2012-05-10
Hi,

I've just installed SBS2008, set up Exchange and created users and users shares with the SBS console.

The Admin account I created during setup doesn't have access to the default User Shares or the extra shares I created. This is odd, as its a member of the Adminstrators group and this group has Full Control rights in the NTFS permissions.

Can anyone tell me what might be going wrong?

Thanks

Karl
0
Comment
Question by:kwinsw
  • 3
4 Comments
 
LVL 23

Accepted Solution

by:
ormerodrutter earned 250 total points
ID: 34101666
Maybe you have removed Administrator from the ACL. This is quite common when user tried to reset permissions on shared folders/files and they selected REMOVE instead of COPY when asked if they want to retain the user groups.

As the Administrator, you can take ownership of that folder and once you took the ownership you can add Administrator or Administrators group back into the ACL.
0
 

Author Comment

by:kwinsw
ID: 34115602
Thanks ormerodrutter.

The Administrator group, of which the admin account was a member, was still present in ACL. I've added the Admin account by name to ACL and all now seems to be well, but I'm a bit baffled as to why the problem arose in the first place.

I've just created a new Security Group using the SBS console. I specify that the group should be able to receive email and then get an error:

Add a New Group Failed
Unable to create an e-mail address for this group

The new Security Group does not show up in the SBS console, but it does show up in Active Directory Users and Computers.

If I go to the Exchange Management Console and try to create a Distribution Group for the new Security Group there, then I get the error:

Error:
Active Directory operation failed on SERVERNAME.domainname.local. This error is not retriable. Additional information: insufficient access rights to perform the operation.
Active directory response: 00002098. SecErr: DSID-03150E8A, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

The user has insufficient access rights.

Exchange management shell command attempted:
Enable-DistributionGroup –Identity ‘domainname.local/MyBusiness/Security Groups/Group-Name’ –Alias ‘GroupName’

Elapsed Time: 00:00:00

I think there’s stuff on the web about similar errors with Exchange 2010, so I’m going to have a look at those pages and see if there’s anything to be done.

The account I’m using is the admin account I created when prompted by the SBS installation routine, so surely it should be a proper, paid-up member of the Administrators  security group?
0
 
LVL 23

Expert Comment

by:ormerodrutter
ID: 34118658
I experienced similar problem in SBS2003 environment before, not exactly the same but the problem is related to Admin not having sufficient rights. Did you MOVE the Administrator account to a different OU?
0
 
LVL 23

Expert Comment

by:ormerodrutter
ID: 34228527
If you are using the SBS Administrator account (the one preconfigured) and have such problem then there is something wrong in the system. If you are using an admin account that you have created then it must be something to do with permission not setup correctly. REmoving and recreating the account with a same name means they are different account.
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
SBS 2008 Standard OEL 2 28
DHCP lease duration / Migration 8 53
How to start a hyper-v in safe mode 5 72
Inactive computer in domain 7 66
I had a question today where the user wanted to know how to delete an SSL Certificate, so I thought that I would quickly add this How to! Article for your reference. WHY WOULD YOU WANT TO DELETE A CERTIFICATE? 1. If an incorrect certificate was …
You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…

803 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question