C Drive Read / Write

James Buller
James Buller used Ask the Experts™
on
Hi Guys

We have a training XP computer in our company and when a domain admin is logged in (company owner) they are unable to write to the c:

When we switch to another domain admin they are able to. i've tried forcing the group policy but still no luck

Any ideas?

Many thanks
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
What error message is given?

Author

Commented:
Access is denied for the company owner (domain admin account) all ok for the other domain admin account
Distinguished Expert 2018

Commented:
Normal behavior since windows xp. Only admins may write to c: directly. ON your system where it does work, the UAC is off while on the other, it is on.
3 solutions:
-don't write to c: but use a folder
-turn off UAC
-change access rights on c:
Ensure you’re charging the right price for your IT

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!

Author

Commented:
Thanks McKnife but its a folder off C:

I understand that people can't normally write to the C:

We don't want to change the access writes as it works on another computer thats next to it with the same settings
Distinguished Expert 2018

Commented:
Ok, please show the access rights using a screenshot.
IT Product Manager
Top Expert 2009
Commented:
Add the user account to local admins group on XP machine.
Right click the folder and take ownership of the folder.

https://support.microsoft.com/en-us/kb/308421
Distinguished Expert 2018

Commented:
Domain admins (as a group, so all of them) are by default in the local administrator group, so the selected solution could not have any effect. What solved it?
noxchoIT Product Manager
Top Expert 2009

Commented:
Looks like the company owner is using a domain admin account which is not a default Domain Admin. That's why it is not in local admins group. I have seen this problem with XP very often when trying to deploy the software to remote XP machine which is part of AD but even using the DC Admin account it failed. Till I added on XP locally the account to admin group.
Distinguished Expert 2018

Commented:
You are not admin until you elevate - same for domain admins. But: if you put "his" domain admin into that group "administrators", it cannot be different since elevation needs to take place anyway.
The only user that does not need to elevate is the account "administrator" (no matter if domain or local account).

So he will have done other adjustments as well, like tuning the ACL to feature his admin's name, directly, I guess. Right, James?

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial