asked on

Server 2008 denies access to clients C: drive

Just replaced my XP Pro "server" with a REAL Dell T310 server as my company has grown beyond that of a Peer to peer network. Let me start by saying I am not a server guy, just a newbie trying to get things to work.. Good news is with Dell's help and webex we got the server set up and the clients can login and use the shares. BAD NEWS is once the clients joined the domain, and logged in, they no longer have access to their C: drives on the client PCs. When the try to create, modify, delete a drive on the client PCs C: drive they get an error message that ACCESS IS DENIED. How the heck can simply logging into a server domain deny access the a clients local C: drive? I am stumped, but I have to remedy thid quicky. Server is running Windows Server 2008 Std R2, clients are running XP Pro SP3. Thanks experts....BobR

ploftin

If users need to create files and folders on their C drives (but outside their personal profile folders), they will need administrative permissions on the client PCs. They probably were logging in locally before using an administrative account. You can do this on each PC by:

1. Start, Run.
2. Type COMPMGMT.MSC and press ENTER.
3. Go to Local Users and Groups, Groups and open the Administrators group.
4. Add the respective user to the group and have them restart the computer.

The above action must be performed by an administrative user on the PC.

shjacks55

Could you clarify? "[They] try to create, modify, delete a drive on the client PCs C: drive " doesn't make sense. I've seen similar problems when a network drive is mapped over the top of a client's drive, but it would need to be a login script or group policy from the server, which would be the responsibility of whoever set up the Server (these are not defaults when I have installed 2008 server from DVD), in this case Dell (often returned conmputers are sent out as "new" although they still contain the previous customers stuff). (Were your client's hard drives originally C:? I've installed several SATA drives that come up as F: so USB flash and other auxilliary drives, like network mapped, show up as C:.)

bobrossi56

ASKER

My typo...if the client tries to create, modify, delete a FILE on the client PCs C: drive they get an error message that ACCESS IS DENIED. Sorry

ploftin

I assumed that's what you meant and my solution still fits. Give it a try.

bobrossi56

ASKER

Ya, I figured you read between the lines. Problem is, in order to log into the local PC as an admin I have to be in the office, and I am on Easter break right now, but will give this a try Monday and see what happens.
-BobR

bobrossi56

ASKER

Ploftin....I went in and tried this:

1. I logged into the local machine using the local PC's Admin account.
2. Start/Run...Type COMPMGMT.MSC and press ENTER.
3. Went to Local Users and Groups, Groups and open the Administrators group. Clicked ADD, then
4. I typed the AD account name in (mrossi@cap.com) for the person that uses this PC, and I clicked Check Names, but I got an error saying an object named "mrossi" could not be found.

Any ideas?
thx

ploftin

You're on the right track. But the system doesn't like what you're typing in for the user's username. Go back to your server and run Active Directory Users and Computers and find the user's account to verify how the user's username is spelled in the system. Also, ensure that on the user's Account tab that the username and the pre-2000 username are both filled in and alike. Then go back to the client pc and try those steps again.

bobrossi56

ASKER

Funny....its my wife, so I am pretty sure the spelling is correct :-)

Attached is the screenshot of the profile tab in AD. I am typing into the add names screen of the local PC the following:
mrossi
mrossi@cap.com
none of these work when I click check names.
Any ideas? thx much...BobR

bobrossi56

ASKER

Also, when I look in doc and settings on the local PC, I see she used to log in (before the new server) as MARY.

ploftin

Should have verified this earlier. Is this new server configured as a domain controller? Also, are the client PCs configured ad members of the new domain?

bobrossi56

ASKER

Yes, the new server is a domain controller, ran dcpromo wizard and it's named DC1, and the domain is cap.com. And yes, the client PCs have been joined to the new domain, and this is when all this C: drive no access started. Each of the 5 users have an AD account they use to login.
thx

ASKER CERTIFIED SOLUTION

bobrossi56

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

bobrossi56

ASKER

Solved this one myself, but thanks to the experts that posted.