Solved

Windows Server 2012 R2 group permissions

Posted on 2014-01-09
4
1,549 Views
Last Modified: 2014-02-05
Hello all,

I feel this should be a simple thing, but I cannot seem to figure out what's going on. I have a new instance of W2K12R2 setup, and it seems that having a user in the Administrators group doesn't actually give it Administrative permissions.

For example, in a folder called C:\Program Files\Test, I have just the SYSTEM user and the Administrators group defined with full control. Inheritance is not enabled, and my user account I'm logged on with is in the Administrators group. Despite this, I cannot access anything in Test unless I explicitly give my account Full control on this folder, even though I'm in the Administrators group.

When I click on the folder I will get a message informing me that "You don't currently have permission to access this folder. Click continue to permanently get access to this folder." When I click Continue, I get the access I need. When I look at the security properties, I notice it has added my account directly to the folder.

What am I doing wrong here?

Thanks,
James
0
Comment
Question by:JLankford
  • 2
  • 2
4 Comments
 
LVL 36

Expert Comment

by:Mahesh
ID: 39769083
It looks like User access control (UAC) issue since you are trying to access folder in root drive under sensitive folder (program files)

Just Turn off UAC from control panel \ gpedit.msc on 2012 r2 server, reboot and test if you are able to access without prompt.
Specially, disable all admin approval mode and "switch secure desktop" UAC settings from gpedit.msc  

Mahesh
0
 

Author Comment

by:JLankford
ID: 39769238
Thanks for the response Mahesh; however I had already tried that. I even tried the same scenario with the Test folder under the root of the C: drive with the same results. I even created a D: drive, but the test folder there and still get the same results.
0
 
LVL 36

Accepted Solution

by:
Mahesh earned 500 total points
ID: 39769294
0
 

Author Comment

by:JLankford
ID: 39801492
I apologize for the delay in follow-up - sort of got pulled away from this for several days. I had not seen the article above; that was very good information. I have made the recommended changes per the article. I will see how the server behaves over the next few days before marking this as resolved.

Thanks for the response Mahesh!

James
0

Featured Post

The Eight Noble Truths of Backup and Recovery

How can IT departments tackle the challenges of a Big Data world? This white paper provides a roadmap to success and helps companies ensure that all their data is safe and secure, no matter if it resides on-premise with physical or virtual machines or in the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Understanding the various editions available is vital when you decide to purchase Windows Server 2012. You need to have a basic understanding of the features and limitations in each edition in order to make a well-informed decision that best suits y…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
In this Micro Tutorial viewers will learn how to use Windows Server Backup to create full image of their system. Tutorial shows how to install Windows Server Backup Feature on Windows 2012R2 and how to configure scheduled Bare Metal Recovery backup.…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

813 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now