Solved

SBS Admin account can't access shares

Posted on 2010-11-10
4
739 Views
Last Modified: 2012-05-10
Hi,

I've just installed SBS2008, set up Exchange and created users and users shares with the SBS console.

The Admin account I created during setup doesn't have access to the default User Shares or the extra shares I created. This is odd, as its a member of the Adminstrators group and this group has Full Control rights in the NTFS permissions.

Can anyone tell me what might be going wrong?

Thanks

Karl
0
Comment
Question by:kwinsw
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
4 Comments
 
LVL 23

Accepted Solution

by:
ormerodrutter earned 250 total points
ID: 34101666
Maybe you have removed Administrator from the ACL. This is quite common when user tried to reset permissions on shared folders/files and they selected REMOVE instead of COPY when asked if they want to retain the user groups.

As the Administrator, you can take ownership of that folder and once you took the ownership you can add Administrator or Administrators group back into the ACL.
0
 

Author Comment

by:kwinsw
ID: 34115602
Thanks ormerodrutter.

The Administrator group, of which the admin account was a member, was still present in ACL. I've added the Admin account by name to ACL and all now seems to be well, but I'm a bit baffled as to why the problem arose in the first place.

I've just created a new Security Group using the SBS console. I specify that the group should be able to receive email and then get an error:

Add a New Group Failed
Unable to create an e-mail address for this group

The new Security Group does not show up in the SBS console, but it does show up in Active Directory Users and Computers.

If I go to the Exchange Management Console and try to create a Distribution Group for the new Security Group there, then I get the error:

Error:
Active Directory operation failed on SERVERNAME.domainname.local. This error is not retriable. Additional information: insufficient access rights to perform the operation.
Active directory response: 00002098. SecErr: DSID-03150E8A, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

The user has insufficient access rights.

Exchange management shell command attempted:
Enable-DistributionGroup –Identity ‘domainname.local/MyBusiness/Security Groups/Group-Name’ –Alias ‘GroupName’

Elapsed Time: 00:00:00

I think there’s stuff on the web about similar errors with Exchange 2010, so I’m going to have a look at those pages and see if there’s anything to be done.

The account I’m using is the admin account I created when prompted by the SBS installation routine, so surely it should be a proper, paid-up member of the Administrators  security group?
0
 
LVL 23

Expert Comment

by:ormerodrutter
ID: 34118658
I experienced similar problem in SBS2003 environment before, not exactly the same but the problem is related to Admin not having sufficient rights. Did you MOVE the Administrator account to a different OU?
0
 
LVL 23

Expert Comment

by:ormerodrutter
ID: 34228527
If you are using the SBS Administrator account (the one preconfigured) and have such problem then there is something wrong in the system. If you are using an admin account that you have created then it must be something to do with permission not setup correctly. REmoving and recreating the account with a same name means they are different account.
0

Featured Post

Why You Need a DevOps Toolchain

IT needs to deliver services with more agility and velocity. IT must roll out application features and innovations faster to keep up with customer demands, which is where a DevOps toolchain steps in. View the infographic to see why you need a DevOps toolchain.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
ADMFILES.INI 7 59
Cannot create 365 Migration Endpoint 11 136
Hyper-V Differencing Disks - how to merge multiple levels of differencing disks 4 76
Ransomware case 23 107
A quick step-by-step overview of installing and configuring Carbonite Server Backup.
This article explains how to install and use the NTBackup utility that comes with Windows Server.
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question