Solved

Windows Server 2012 R2 group permissions

Posted on 2014-01-09
4
1,507 Views
Last Modified: 2014-02-05
Hello all,

I feel this should be a simple thing, but I cannot seem to figure out what's going on. I have a new instance of W2K12R2 setup, and it seems that having a user in the Administrators group doesn't actually give it Administrative permissions.

For example, in a folder called C:\Program Files\Test, I have just the SYSTEM user and the Administrators group defined with full control. Inheritance is not enabled, and my user account I'm logged on with is in the Administrators group. Despite this, I cannot access anything in Test unless I explicitly give my account Full control on this folder, even though I'm in the Administrators group.

When I click on the folder I will get a message informing me that "You don't currently have permission to access this folder. Click continue to permanently get access to this folder." When I click Continue, I get the access I need. When I look at the security properties, I notice it has added my account directly to the folder.

What am I doing wrong here?

Thanks,
James
0
Comment
Question by:JLankford
  • 2
  • 2
4 Comments
 
LVL 35

Expert Comment

by:Mahesh
Comment Utility
It looks like User access control (UAC) issue since you are trying to access folder in root drive under sensitive folder (program files)

Just Turn off UAC from control panel \ gpedit.msc on 2012 r2 server, reboot and test if you are able to access without prompt.
Specially, disable all admin approval mode and "switch secure desktop" UAC settings from gpedit.msc  

Mahesh
0
 

Author Comment

by:JLankford
Comment Utility
Thanks for the response Mahesh; however I had already tried that. I even tried the same scenario with the Test folder under the root of the C: drive with the same results. I even created a D: drive, but the test folder there and still get the same results.
0
 
LVL 35

Accepted Solution

by:
Mahesh earned 500 total points
Comment Utility
0
 

Author Comment

by:JLankford
Comment Utility
I apologize for the delay in follow-up - sort of got pulled away from this for several days. I had not seen the article above; that was very good information. I have made the recommended changes per the article. I will see how the server behaves over the next few days before marking this as resolved.

Thanks for the response Mahesh!

James
0

Featured Post

Get up to 2TB FREE CLOUD per backup license!

An exclusive Black Friday offer just for Expert Exchange audience! Buy any of our top-rated backup solutions & get up to 2TB free cloud per system! Perform local & cloud backup in the same step, and restore instantly—anytime, anywhere. Grab this deal now before it disappears!

Join & Write a Comment

Every now and then, Microsoft does something that totally impresses me. It doesn't happen often, but in this case I must say I am thoroughly impressed with Windows Server Backup. One of the long time issues with Windows Backup has been the ability t…
You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
In this Micro Tutorial viewers will learn how to use Windows Server Backup to create full image of their system. Tutorial shows how to install Windows Server Backup Feature on Windows 2012R2 and how to configure scheduled Bare Metal Recovery backup.…
In this Micro Tutorial viewers will learn how to use Boot Corrector from Paragon Rescue Kit Free to identify and fix the boot problems of Windows 7/8/2012R2 etc. As an example is used Windows 2012R2 which lost its active partition flag (often happen…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now