Solved

Windows Server 2012 R2 group permissions

Posted on 2014-01-09
4
1,616 Views
Last Modified: 2014-02-05
Hello all,

I feel this should be a simple thing, but I cannot seem to figure out what's going on. I have a new instance of W2K12R2 setup, and it seems that having a user in the Administrators group doesn't actually give it Administrative permissions.

For example, in a folder called C:\Program Files\Test, I have just the SYSTEM user and the Administrators group defined with full control. Inheritance is not enabled, and my user account I'm logged on with is in the Administrators group. Despite this, I cannot access anything in Test unless I explicitly give my account Full control on this folder, even though I'm in the Administrators group.

When I click on the folder I will get a message informing me that "You don't currently have permission to access this folder. Click continue to permanently get access to this folder." When I click Continue, I get the access I need. When I look at the security properties, I notice it has added my account directly to the folder.

What am I doing wrong here?

Thanks,
James
0
Comment
Question by:JLankford
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 37

Expert Comment

by:Mahesh
ID: 39769083
It looks like User access control (UAC) issue since you are trying to access folder in root drive under sensitive folder (program files)

Just Turn off UAC from control panel \ gpedit.msc on 2012 r2 server, reboot and test if you are able to access without prompt.
Specially, disable all admin approval mode and "switch secure desktop" UAC settings from gpedit.msc  

Mahesh
0
 

Author Comment

by:JLankford
ID: 39769238
Thanks for the response Mahesh; however I had already tried that. I even tried the same scenario with the Test folder under the root of the C: drive with the same results. I even created a D: drive, but the test folder there and still get the same results.
0
 
LVL 37

Accepted Solution

by:
Mahesh earned 500 total points
ID: 39769294
0
 

Author Comment

by:JLankford
ID: 39801492
I apologize for the delay in follow-up - sort of got pulled away from this for several days. I had not seen the article above; that was very good information. I have made the recommended changes per the article. I will see how the server behaves over the next few days before marking this as resolved.

Thanks for the response Mahesh!

James
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Table of Contents: Lesson 1 - Installing Windows Server 2012 (http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Windows_Server_2012/A_11592-Become-an-Administrator-Installing-Windows-Server-2012.html) Lesson 2 - Configuring Ser…
Resolve DNS query failed errors for Exchange
In this Micro Tutorial viewers will learn how to use Boot Corrector from Paragon Rescue Kit Free to identify and fix the boot problems of Windows 7/8/2012R2 etc. As an example is used Windows 2012R2 which lost its active partition flag (often happen…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

688 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question