Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

Server 2008 denies access to clients C: drive

Posted on 2011-04-22
13
Medium Priority
?
464 Views
Last Modified: 2012-05-11
Just replaced my XP Pro "server" with a REAL Dell T310 server as my company has grown beyond that of a Peer to peer network. Let me start by saying I am not a server guy, just a newbie trying to get things to work.. Good news is with Dell's help and webex we got the server set up and the clients can login and use the shares. BAD NEWS is once the clients joined the domain, and logged in, they no longer have access to their C: drives on the client PCs. When the try to create, modify, delete a drive on the client PCs C: drive they get an error message that ACCESS IS DENIED. How the heck can simply logging into a server domain deny access the a clients local C: drive? I am stumped, but I have to remedy thid quicky.  Server is running Windows Server 2008 Std R2, clients are running XP Pro SP3. Thanks experts....BobR
0
Comment
Question by:bobrossi56
  • 8
  • 4
13 Comments
 
LVL 5

Expert Comment

by:ploftin
ID: 35451584
If users need to create files and folders on their C drives (but outside their personal profile folders), they will need administrative permissions on the client PCs. They probably were logging in locally before using an administrative account. You can do this on each PC by:

1. Start, Run.
2. Type COMPMGMT.MSC and press ENTER.
3. Go to Local Users and Groups, Groups and open the Administrators group.
4. Add the respective user to the group and have them restart the computer.

The above action must be performed by an administrative user on the PC.
0
 
LVL 3

Expert Comment

by:shjacks55
ID: 35451605
Could you clarify? "[They] try to create, modify, delete a drive on the client PCs C: drive " doesn't make sense.  I've seen similar problems when a network drive is mapped over the top of a client's drive, but it would need to be a login script or group policy from the server, which would be the responsibility of whoever set up the Server (these are not defaults when I have installed 2008 server from DVD), in this case Dell (often returned conmputers are sent out as "new" although they still contain the previous customers stuff).  (Were your client's hard drives originally C:? I've installed several SATA drives that come up as F: so USB flash and other auxilliary drives, like network mapped, show up as C:.)
0
 

Author Comment

by:bobrossi56
ID: 35451645
My typo...if the client tries to create, modify, delete a FILE on the client PCs C: drive they get an error message that ACCESS IS DENIED. Sorry
0
Get quick recovery of individual SharePoint items

Free tool – Veeam Explorer for Microsoft SharePoint, enables fast, easy restores of SharePoint sites, documents, libraries and lists — all with no agents to manage and no additional licenses to buy.

 
LVL 5

Expert Comment

by:ploftin
ID: 35453169
I assumed that's what you meant and my solution still fits. Give it a try.
0
 

Author Comment

by:bobrossi56
ID: 35453608
Ya, I figured you read between the lines. Problem is, in order to log into the local PC as an admin I have to be in the office, and I am on Easter break right now, but will give this a try Monday and see what happens.
-BobR
0
 

Author Comment

by:bobrossi56
ID: 35454492
Ploftin....I went in and tried this:

1. I logged into the local machine using the local PC's Admin account.
2. Start/Run...Type COMPMGMT.MSC and press ENTER.
3. Went to Local Users and Groups, Groups and open the Administrators group. Clicked ADD, then
4. I typed the AD account name in (mrossi@cap.com) for the person that uses this PC, and I clicked Check Names, but I got an error saying an object named "mrossi" could not be found.

Any ideas?
thx
0
 
LVL 5

Expert Comment

by:ploftin
ID: 35454981
You're on the right track. But the system doesn't like what you're typing in for the user's username. Go back to your server and run Active Directory Users and Computers and find the user's account to verify how the user's username is spelled in the system. Also, ensure that on the user's Account tab that the username and the pre-2000 username are both filled in and alike. Then go back to the client pc and try those steps again.
0
 

Author Comment

by:bobrossi56
ID: 35456211
Funny....its my wife, so I am pretty sure the spelling is correct :-)

Attached is the screenshot of the profile tab in AD. I am typing into the add names screen of the local PC the following:
mrossi
mrossi@cap.com
none of these work when I click check names.
Any ideas? thx much...BobR screenshot
0
 

Author Comment

by:bobrossi56
ID: 35456221
Also, when I look in doc and settings on the local PC, I see she used to log in (before the new server) as MARY.
0
 
LVL 5

Expert Comment

by:ploftin
ID: 35456455
Should have verified this earlier. Is this new server configured as a domain controller? Also, are the client PCs configured ad members of the new domain?
0
 

Author Comment

by:bobrossi56
ID: 35457651
Yes, the new server is a domain controller, ran dcpromo wizard and it's named DC1, and the domain is cap.com. And yes, the client PCs have been joined to the new domain, and this is when all this C: drive no access started. Each of the 5 users have an AD account they use to login.
thx
0
 

Accepted Solution

by:
bobrossi56 earned 0 total points
ID: 35461498
Finally got to the botton of this issue. The DNS on the server had not been installed and configured. Once I did that, and the client PC got the correct DNS, I was able to add the domain account tot he local users and groups admin group and grant C drive access.
0
 

Author Closing Comment

by:bobrossi56
ID: 35496475
Solved this one myself, but thanks to the experts that posted.
0

Featured Post

Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Microsoft's Excel has many features that most people will never need nor take advantage of.  Conditional formatting is one feature that you may find a necessity once you start using it.
After seeing many questions for JRNL_WRAP_ERROR for replication failure, I thought it would be useful to write this article.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…

810 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question