SBS 2011 administrator getting 'don't have permission' errors
Posted on 2013-01-12
I have SBS2011 with a few Windows 7 Pro machines attached in a single domain environment. My issue started a few months ago but it seems to be so erratic and unpredictable I have no idea where to start looking.
Here is an example of more disruptive issues I have experienced so far. A standard user's PC started locking up and crashing. I had a spare (clean installed) Win 7 Pro laptop so I used that and setup for the user (meaning, logged in with their username). within a few hours, it locked up. I tried with another 'clean' Win 7 Pro machine and that locked up within 30 minutes of logging in. In the end, I deleted the user account and created a new user account and logged on with that new account and everything worked. For that user, everything has been stable for weeks.
A few days ago, I needed to edit a file (I created in the past) in c:\windows on every Win 7 PCs. Just a text file needed to run special accounting software. I login to the PC directly (using my administrator username) and successfully modified the file in couple of PCs. When I got to the 3rd PC, I got 'You do not have permission, only administrator can…' I continued and it let me modify the file. By the time I got to the 4th PC, it said 'You do not have permission…' then locked up the PC. I restarted the PC and tried just renaming that text file but that locked up the PC also. No [CTRL] + [ALT] + [DEL], no access to Start button, etc., I had to force shut down. I have read a few posts about people experiencing permission issues on shared folder but this is not the case for me. I am logged in directly to PCs. However my access credentials must come from the server so something on the server must have gone strange.
I can only assume that this is some sort of corrupt permissions issue associated with user accounts (be it 'user' or 'admin' accounts). Maybe something to do with 'Group Policy'? Not sure. That is my problem. I don't know where to start.
In the immediate term, I need to replace the text file in c:\windows, but I really need to get to the bottom, of what appears to me a 'permission' or 'group policy' related issue. My request to all you experts. "Can anyone point me where the issue might be coming from?" Do I need to reset the permissions (if that is possible)?
I can do everyday stuff on SBS but not an expert so if you are kind enough to help, I would very much appreciate some details in your recommendations (ie. which admin tool to use, what specifically need doing, etc.,) Sorry to be a pain. And definitely please don't suggest anything risky that can kill the SBS server.
Thanks for reading this post.