Solved

Windows Server 2012 R2 group permissions

Posted on 2014-01-09
4
1,536 Views
Last Modified: 2014-02-05
Hello all,

I feel this should be a simple thing, but I cannot seem to figure out what's going on. I have a new instance of W2K12R2 setup, and it seems that having a user in the Administrators group doesn't actually give it Administrative permissions.

For example, in a folder called C:\Program Files\Test, I have just the SYSTEM user and the Administrators group defined with full control. Inheritance is not enabled, and my user account I'm logged on with is in the Administrators group. Despite this, I cannot access anything in Test unless I explicitly give my account Full control on this folder, even though I'm in the Administrators group.

When I click on the folder I will get a message informing me that "You don't currently have permission to access this folder. Click continue to permanently get access to this folder." When I click Continue, I get the access I need. When I look at the security properties, I notice it has added my account directly to the folder.

What am I doing wrong here?

Thanks,
James
0
Comment
Question by:JLankford
  • 2
  • 2
4 Comments
 
LVL 35

Expert Comment

by:Mahesh
ID: 39769083
It looks like User access control (UAC) issue since you are trying to access folder in root drive under sensitive folder (program files)

Just Turn off UAC from control panel \ gpedit.msc on 2012 r2 server, reboot and test if you are able to access without prompt.
Specially, disable all admin approval mode and "switch secure desktop" UAC settings from gpedit.msc  

Mahesh
0
 

Author Comment

by:JLankford
ID: 39769238
Thanks for the response Mahesh; however I had already tried that. I even tried the same scenario with the Test folder under the root of the C: drive with the same results. I even created a D: drive, but the test folder there and still get the same results.
0
 
LVL 35

Accepted Solution

by:
Mahesh earned 500 total points
ID: 39769294
0
 

Author Comment

by:JLankford
ID: 39801492
I apologize for the delay in follow-up - sort of got pulled away from this for several days. I had not seen the article above; that was very good information. I have made the recommended changes per the article. I will see how the server behaves over the next few days before marking this as resolved.

Thanks for the response Mahesh!

James
0

Featured Post

Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Microsoft patching 2 45
Windows Permissions 4 36
DNS Settings for Domain controllers 22 52
Create New Attributes in Active Directory Schema 2 5
Table of Contents: Lesson 1 - Installing Windows Server 2012 (http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Windows_Server_2012/A_11592-Become-an-Administrator-Installing-Windows-Server-2012.html) Lesson 2 - Configuring Ser…
My GPO's made for 2008 R2 servers were not allowing me to RDP into a new 2012 server by default.  That’s why I tried to allow RDP via Powershell, because I could log into a remote shell without further configuration. Below I will describe how I wen…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of installing the necessary services and then configuring a Windows Server 2012 system as an iSCSI target. To install the necessary roles, go to Server Manager, and select Add Roles and Featu…

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

25 Experts available now in Live!

Get 1:1 Help Now