Solved

You don't currently have permission to access this folder.

Posted on 2013-06-12
5
3,247 Views
Last Modified: 2013-06-14
Hello,

We recently migrated several shares from our Windows Server 2008 Std to a new Windows Server 2012 storage.  We did this via a Commvault restore in order to keep all of the ACLs.  And it worked just fine.

Here's the issue:  If I navigate to these folders from my workstation (\\servername) I can access them just fine.  However, when I do an RDC to the server and try to access any of the new shares, I receive the attached error.  I don't get it, I am in both Domain and Enterprise Admins groups.  ANd some of the other admins are experiencing the same issue.

If I click Continue, I gain access and my user ID gets added to the Security list but, if I take my name of that list, boom!, I loose access again.

Thanks
Permission01.JPG
0
Comment
Question by:IDMA
  • 2
  • 2
5 Comments
 
LVL 8

Expert Comment

by:Esteban Blanco
ID: 39241588
This is a new security feature on 2012.  You should be able to add users to that list (or a group I believe).  Also, take ownership of the folders and make the necessary changes.

1. Right-click the file or folder for which you want to set permissions, click Properties, and then click the Security tab.

2. Click Advanced to open the Advanced Security Settings dialog box.

3. Click Owner tab, click Edit. If you are prompted for an administrator password or confirmation, type your password or click Continue.

4. In the new Advanced Security Settings box, in the Change owner to: field, select your User name, and Check the Replace owner on subcontainers and objects. Click OK, repeat for remaining boxes. (If your User name is not listed click the Other users or groups button to add your account).

5. Open the file or folder you wish to access.
0
 

Author Comment

by:IDMA
ID: 39242343
No luck.  Even after changing the owner, it reverts back to "Unable to Display Current Owner"
0
 
LVL 13

Accepted Solution

by:
Michael Machie earned 300 total points
ID: 39242521
First off, verify that your credentials for the RDC are the same that you use for logging into your laptop. If they are different, make them the same and then try accessing the folder again - it could be as easy as a simple User account not having permissions.

Also, The migration tool can possibly bring over share permissions from the source folder and I expect you will encounter additional folders with this issue at some point.

One reason may be because the old Server was using Simple File Sharing and shares were set that way and with the new Servers Simple File Sharing should be disabled. When the permissions and Shares were migrated it is possible that the old 'Simple' permissions were applied on top of the recommended (and default) 'Advanced' permissions, which will cause this problem.

If this is indeed the scenario, taking ownership WILL get you through the problem in the short term, but will not resolve the problem as a whole, as you might need to repeat this process on every Share root folder . This happened to me when I built a new Server and set permissions from scratch (due to dirty permissions on the old server). I had asked one of my techs to manually copy all files and folders from the old shares to the new ones (I know, tedious) and he decided to use RoboCopy instead.. RoboCopy, although it is not supposed to do this unless specified, brought over all of the old permissions, which were configured via the 'Simple' method - and caused this issue for me. Once I rebuilt the Share permissions using the 'Advanced' method, these errors went away.

I bet that logging in as the local Admin on that Server will allow you access to the folders without restriction. If the Local Admin succeeds where the Domain Admin login fails, it is probably related to the 'Simple' and 'Advanced' permission types I mentioned above.
0
 

Author Closing Comment

by:IDMA
ID: 39247913
Machienet,
Yes, I think it is the Commvault restore procedure.  It brings all of the permissions into the new server but it has that glitch.  ANy of our admins will have to click "Continue" and this adds them to the Security ACL.

Logging in as the local admin let me access most of the folders without having to acknowledge the permissions dialog.

If I create a new folder, there's no issue for anybody.

Thank you for the insight.
0
 
LVL 13

Expert Comment

by:Michael Machie
ID: 39248488
You are welcome. I am glad it is now identified and resolved so you can focus on more important issues!
0

Featured Post

Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

Join & Write a Comment

Recently, I was assigned the task of performing a hardware refresh in the datacenter. The previous Windows 2008 systems were connected to the SAN via fiber channel HBA’s and among other thing, had PowerPath installed in order to provide sufficient f…
A procedure for exporting installed hotfix details of remote computers using powershell
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now