Avatar of kwinsw
kwinsw asked on

SBS Admin account can't access shares

Hi,

I've just installed SBS2008, set up Exchange and created users and users shares with the SBS console.

The Admin account I created during setup doesn't have access to the default User Shares or the extra shares I created. This is odd, as its a member of the Adminstrators group and this group has Full Control rights in the NTFS permissions.

Can anyone tell me what might be going wrong?

Thanks

Karl
SBSWindows Server 2008

Avatar of undefined
Last Comment
ormerodrutter

8/22/2022 - Mon
ASKER CERTIFIED SOLUTION
ormerodrutter

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
See how we're fighting big data
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
ASKER
kwinsw

Thanks ormerodrutter.

The Administrator group, of which the admin account was a member, was still present in ACL. I've added the Admin account by name to ACL and all now seems to be well, but I'm a bit baffled as to why the problem arose in the first place.

I've just created a new Security Group using the SBS console. I specify that the group should be able to receive email and then get an error:

Add a New Group Failed
Unable to create an e-mail address for this group

The new Security Group does not show up in the SBS console, but it does show up in Active Directory Users and Computers.

If I go to the Exchange Management Console and try to create a Distribution Group for the new Security Group there, then I get the error:

Error:
Active Directory operation failed on SERVERNAME.domainname.local. This error is not retriable. Additional information: insufficient access rights to perform the operation.
Active directory response: 00002098. SecErr: DSID-03150E8A, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

The user has insufficient access rights.

Exchange management shell command attempted:
Enable-DistributionGroup –Identity ‘domainname.local/MyBusiness/Security Groups/Group-Name’ –Alias ‘GroupName’

Elapsed Time: 00:00:00

I think there’s stuff on the web about similar errors with Exchange 2010, so I’m going to have a look at those pages and see if there’s anything to be done.

The account I’m using is the admin account I created when prompted by the SBS installation routine, so surely it should be a proper, paid-up member of the Administrators  security group?
ormerodrutter

I experienced similar problem in SBS2003 environment before, not exactly the same but the problem is related to Admin not having sufficient rights. Did you MOVE the Administrator account to a different OU?
ormerodrutter

If you are using the SBS Administrator account (the one preconfigured) and have such problem then there is something wrong in the system. If you are using an admin account that you have created then it must be something to do with permission not setup correctly. REmoving and recreating the account with a same name means they are different account.
Experts Exchange has (a) saved my job multiple times, (b) saved me hours, days, and even weeks of work, and often (c) makes me look like a superhero! This place is MAGIC!
Walt Forbes