Server 2008 denies access to clients C: drive

Just replaced my XP Pro "server" with a REAL Dell T310 server as my company has grown beyond that of a Peer to peer network. Let me start by saying I am not a server guy, just a newbie trying to get things to work.. Good news is with Dell's help and webex we got the server set up and the clients can login and use the shares. BAD NEWS is once the clients joined the domain, and logged in, they no longer have access to their C: drives on the client PCs. When the try to create, modify, delete a drive on the client PCs C: drive they get an error message that ACCESS IS DENIED. How the heck can simply logging into a server domain deny access the a clients local C: drive? I am stumped, but I have to remedy thid quicky.  Server is running Windows Server 2008 Std R2, clients are running XP Pro SP3. Thanks experts....BobR
bobrossi56Asked:
Who is Participating?
 
bobrossi56Connect With a Mentor Author Commented:
Finally got to the botton of this issue. The DNS on the server had not been installed and configured. Once I did that, and the client PC got the correct DNS, I was able to add the domain account tot he local users and groups admin group and grant C drive access.
0
 
ploftinCommented:
If users need to create files and folders on their C drives (but outside their personal profile folders), they will need administrative permissions on the client PCs. They probably were logging in locally before using an administrative account. You can do this on each PC by:

1. Start, Run.
2. Type COMPMGMT.MSC and press ENTER.
3. Go to Local Users and Groups, Groups and open the Administrators group.
4. Add the respective user to the group and have them restart the computer.

The above action must be performed by an administrative user on the PC.
0
 
shjacks55Commented:
Could you clarify? "[They] try to create, modify, delete a drive on the client PCs C: drive " doesn't make sense.  I've seen similar problems when a network drive is mapped over the top of a client's drive, but it would need to be a login script or group policy from the server, which would be the responsibility of whoever set up the Server (these are not defaults when I have installed 2008 server from DVD), in this case Dell (often returned conmputers are sent out as "new" although they still contain the previous customers stuff).  (Were your client's hard drives originally C:? I've installed several SATA drives that come up as F: so USB flash and other auxilliary drives, like network mapped, show up as C:.)
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
bobrossi56Author Commented:
My typo...if the client tries to create, modify, delete a FILE on the client PCs C: drive they get an error message that ACCESS IS DENIED. Sorry
0
 
ploftinCommented:
I assumed that's what you meant and my solution still fits. Give it a try.
0
 
bobrossi56Author Commented:
Ya, I figured you read between the lines. Problem is, in order to log into the local PC as an admin I have to be in the office, and I am on Easter break right now, but will give this a try Monday and see what happens.
-BobR
0
 
bobrossi56Author Commented:
Ploftin....I went in and tried this:

1. I logged into the local machine using the local PC's Admin account.
2. Start/Run...Type COMPMGMT.MSC and press ENTER.
3. Went to Local Users and Groups, Groups and open the Administrators group. Clicked ADD, then
4. I typed the AD account name in (mrossi@cap.com) for the person that uses this PC, and I clicked Check Names, but I got an error saying an object named "mrossi" could not be found.

Any ideas?
thx
0
 
ploftinCommented:
You're on the right track. But the system doesn't like what you're typing in for the user's username. Go back to your server and run Active Directory Users and Computers and find the user's account to verify how the user's username is spelled in the system. Also, ensure that on the user's Account tab that the username and the pre-2000 username are both filled in and alike. Then go back to the client pc and try those steps again.
0
 
bobrossi56Author Commented:
Funny....its my wife, so I am pretty sure the spelling is correct :-)

Attached is the screenshot of the profile tab in AD. I am typing into the add names screen of the local PC the following:
mrossi
mrossi@cap.com
none of these work when I click check names.
Any ideas? thx much...BobR screenshot
0
 
bobrossi56Author Commented:
Also, when I look in doc and settings on the local PC, I see she used to log in (before the new server) as MARY.
0
 
ploftinCommented:
Should have verified this earlier. Is this new server configured as a domain controller? Also, are the client PCs configured ad members of the new domain?
0
 
bobrossi56Author Commented:
Yes, the new server is a domain controller, ran dcpromo wizard and it's named DC1, and the domain is cap.com. And yes, the client PCs have been joined to the new domain, and this is when all this C: drive no access started. Each of the 5 users have an AD account they use to login.
thx
0
 
bobrossi56Author Commented:
Solved this one myself, but thanks to the experts that posted.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.