Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

SBS Admin account can't access shares

Posted on 2010-11-10
4
Medium Priority
?
767 Views
Last Modified: 2012-05-10
Hi,

I've just installed SBS2008, set up Exchange and created users and users shares with the SBS console.

The Admin account I created during setup doesn't have access to the default User Shares or the extra shares I created. This is odd, as its a member of the Adminstrators group and this group has Full Control rights in the NTFS permissions.

Can anyone tell me what might be going wrong?

Thanks

Karl
0
Comment
Question by:kwinsw
  • 3
4 Comments
 
LVL 23

Accepted Solution

by:
ormerodrutter earned 1000 total points
ID: 34101666
Maybe you have removed Administrator from the ACL. This is quite common when user tried to reset permissions on shared folders/files and they selected REMOVE instead of COPY when asked if they want to retain the user groups.

As the Administrator, you can take ownership of that folder and once you took the ownership you can add Administrator or Administrators group back into the ACL.
0
 

Author Comment

by:kwinsw
ID: 34115602
Thanks ormerodrutter.

The Administrator group, of which the admin account was a member, was still present in ACL. I've added the Admin account by name to ACL and all now seems to be well, but I'm a bit baffled as to why the problem arose in the first place.

I've just created a new Security Group using the SBS console. I specify that the group should be able to receive email and then get an error:

Add a New Group Failed
Unable to create an e-mail address for this group

The new Security Group does not show up in the SBS console, but it does show up in Active Directory Users and Computers.

If I go to the Exchange Management Console and try to create a Distribution Group for the new Security Group there, then I get the error:

Error:
Active Directory operation failed on SERVERNAME.domainname.local. This error is not retriable. Additional information: insufficient access rights to perform the operation.
Active directory response: 00002098. SecErr: DSID-03150E8A, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

The user has insufficient access rights.

Exchange management shell command attempted:
Enable-DistributionGroup –Identity ‘domainname.local/MyBusiness/Security Groups/Group-Name’ –Alias ‘GroupName’

Elapsed Time: 00:00:00

I think there’s stuff on the web about similar errors with Exchange 2010, so I’m going to have a look at those pages and see if there’s anything to be done.

The account I’m using is the admin account I created when prompted by the SBS installation routine, so surely it should be a proper, paid-up member of the Administrators  security group?
0
 
LVL 23

Expert Comment

by:ormerodrutter
ID: 34118658
I experienced similar problem in SBS2003 environment before, not exactly the same but the problem is related to Admin not having sufficient rights. Did you MOVE the Administrator account to a different OU?
0
 
LVL 23

Expert Comment

by:ormerodrutter
ID: 34228527
If you are using the SBS Administrator account (the one preconfigured) and have such problem then there is something wrong in the system. If you are using an admin account that you have created then it must be something to do with permission not setup correctly. REmoving and recreating the account with a same name means they are different account.
0

Featured Post

NEW Veeam Agent for Microsoft Windows

Backup and recover physical and cloud-based servers and workstations, as well as endpoint devices that belong to remote users. Avoid downtime and data loss quickly and easily for Windows-based physical or public cloud-based workloads!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
After seeing many questions for JRNL_WRAP_ERROR for replication failure, I thought it would be useful to write this article.
This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…

971 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question