Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

SBS Admin account can't access shares

Posted on 2010-11-10
4
728 Views
Last Modified: 2012-05-10
Hi,

I've just installed SBS2008, set up Exchange and created users and users shares with the SBS console.

The Admin account I created during setup doesn't have access to the default User Shares or the extra shares I created. This is odd, as its a member of the Adminstrators group and this group has Full Control rights in the NTFS permissions.

Can anyone tell me what might be going wrong?

Thanks

Karl
0
Comment
Question by:kwinsw
  • 3
4 Comments
 
LVL 23

Accepted Solution

by:
ormerodrutter earned 250 total points
ID: 34101666
Maybe you have removed Administrator from the ACL. This is quite common when user tried to reset permissions on shared folders/files and they selected REMOVE instead of COPY when asked if they want to retain the user groups.

As the Administrator, you can take ownership of that folder and once you took the ownership you can add Administrator or Administrators group back into the ACL.
0
 

Author Comment

by:kwinsw
ID: 34115602
Thanks ormerodrutter.

The Administrator group, of which the admin account was a member, was still present in ACL. I've added the Admin account by name to ACL and all now seems to be well, but I'm a bit baffled as to why the problem arose in the first place.

I've just created a new Security Group using the SBS console. I specify that the group should be able to receive email and then get an error:

Add a New Group Failed
Unable to create an e-mail address for this group

The new Security Group does not show up in the SBS console, but it does show up in Active Directory Users and Computers.

If I go to the Exchange Management Console and try to create a Distribution Group for the new Security Group there, then I get the error:

Error:
Active Directory operation failed on SERVERNAME.domainname.local. This error is not retriable. Additional information: insufficient access rights to perform the operation.
Active directory response: 00002098. SecErr: DSID-03150E8A, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

The user has insufficient access rights.

Exchange management shell command attempted:
Enable-DistributionGroup –Identity ‘domainname.local/MyBusiness/Security Groups/Group-Name’ –Alias ‘GroupName’

Elapsed Time: 00:00:00

I think there’s stuff on the web about similar errors with Exchange 2010, so I’m going to have a look at those pages and see if there’s anything to be done.

The account I’m using is the admin account I created when prompted by the SBS installation routine, so surely it should be a proper, paid-up member of the Administrators  security group?
0
 
LVL 23

Expert Comment

by:ormerodrutter
ID: 34118658
I experienced similar problem in SBS2003 environment before, not exactly the same but the problem is related to Admin not having sufficient rights. Did you MOVE the Administrator account to a different OU?
0
 
LVL 23

Expert Comment

by:ormerodrutter
ID: 34228527
If you are using the SBS Administrator account (the one preconfigured) and have such problem then there is something wrong in the system. If you are using an admin account that you have created then it must be something to do with permission not setup correctly. REmoving and recreating the account with a same name means they are different account.
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A quick step-by-step overview of installing and configuring Carbonite Server Backup.
Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…

840 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question