vmich
asked on
Issue with server 2012 R2 and access to folders
I am doing a migration to a server 2012 R2 and when I try to access the folders, I get this message:
You currently don't have permissions to access this folder.
Is this normal for 2012 or is there a way that I can stop this from happening each I migrate data over to it?
If I click on each folder, it seems to let me in..
You currently don't have permissions to access this folder.
Is this normal for 2012 or is there a way that I can stop this from happening each I migrate data over to it?
If I click on each folder, it seems to let me in..
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
So can you please clarify because I'm a little confused:
So you Have or you don't have access to this folders ?
when I try to access the folders, I get this message: You currently don't have permissions to access this folder.
If I click on each folder, it seems to let me in..
So you Have or you don't have access to this folders ?
Most likely, this is the issue: https://support.microsoft.com/en-us/kb/950934
ASKER
Sorry
When I first copy over the data and try to access it, I get the message but once I click on the folder, I can get in..
I am migrating over 400 folders and I really don't want to have to click on each one to be able to get into them..
When I first copy over the data and try to access it, I get the message but once I click on the folder, I can get in..
I am migrating over 400 folders and I really don't want to have to click on each one to be able to get into them..
Try Disable User Account Control (UAC) on Windows Server
ASKER
That was the first thing I tried before opening this ticket..
I'm assuming you're domain admin and you're using same account to transfer files and folders as you was using to install new server.
Right ?
Go disk properties security tab and make sure Domain Admin has ALL Rights (Full Control) to root folder and subfolders and files.
You can select Replace all child object permission entries with inheritable permissions .....
Restart server
Right ?
Go disk properties security tab and make sure Domain Admin has ALL Rights (Full Control) to root folder and subfolders and files.
You can select Replace all child object permission entries with inheritable permissions .....
Restart server
What are you using to copy the files? When I migrate File data to new server I use Robo copy and use switches to copy all Security permissions etc.
Never had any issues doin that, can aslo ksut run intial copy and then when cut over just run another copy to just send changes.
Never had any issues doin that, can aslo ksut run intial copy and then when cut over just run another copy to just send changes.
ASKER
That's what I am using
And copying security?
ASKER
yes use these options....
/sec /secfix /mir
/sec /secfix /mir
This is what i normally use
start robocopy "source" "target" /MIR /COPYALL /ZB /W:1 /R:1 /LOG:c:\results.txt /TEE
NOTE: Don’t have the log file writing to the source directory.
start robocopy "source" "target" /MIR /COPYALL /ZB /W:1 /R:1 /LOG:c:\results.txt /TEE
NOTE: Don’t have the log file writing to the source directory.
ASKER
Yes I have the logs going to their own folder...
Have a look at this.
http://clintboessen.blogspot.co.uk/2013/05/you-dont-currently-have-permission-to.html
May help, I cant say I have had this issue,
http://clintboessen.blogspot.co.uk/2013/05/you-dont-currently-have-permission-to.html
May help, I cant say I have had this issue,
This is due to some default Security Policy Settings on Server 2012.
If this is a domain controller, the setting will be in the Default Domain Controller's Group Policy. If not a DC, then it will be in the local security policy.
In either case, open up GPMC and navigate to:
Computer Configuration --> Windows Settings --> Security Settings --> Local Policies --> Security Options
Look for these three settings:
Set the policies settings as follows:
User Account Control: Admin Approval Mode for the Built-in Administrator account -- Disabled
User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode -- Elevate without prompting
User Account Control: Run all administrators in Admin Approval Mode -- Disabled
That should resolve the problem as long as your account is listed in the NTFS Security Permissions of the file.
If this is a domain controller, the setting will be in the Default Domain Controller's Group Policy. If not a DC, then it will be in the local security policy.
In either case, open up GPMC and navigate to:
Computer Configuration --> Windows Settings --> Security Settings --> Local Policies --> Security Options
Look for these three settings:
- User Account Control: Admin Approval Mode for the Built-in Administrator account
- User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode
- User Account Control: Run all administrators in Admin Approval Mode
Set the policies settings as follows:
User Account Control: Admin Approval Mode for the Built-in Administrator account -- Disabled
User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode -- Elevate without prompting
User Account Control: Run all administrators in Admin Approval Mode -- Disabled
That should resolve the problem as long as your account is listed in the NTFS Security Permissions of the file.
ASKER
Jeff,
I see those settings but when I try to disable or enable them they are greyed out.. Is there something I need to do to be able to change theses?
I see those settings but when I try to disable or enable them they are greyed out.. Is there something I need to do to be able to change theses?
You must first check the box above the "Enabled/Disabled" buttons that says, "Define this setting"
When you access the folder are us accessing it on the server itself or via share? Also I remember running into an issue a couple of times with Windows 2012 where the GUI would say that UAC was disabled but in fact it really wasn't. Please check the registry location listed in the following article:
https://social.technet.microsoft.com/wiki/contents/articles/13953.windows-server-2012-deactivating-uac.aspx
https://social.technet.microsoft.com/wiki/contents/articles/13953.windows-server-2012-deactivating-uac.aspx
ASKER
sorry for the delay..
Rights were not setup correct.
Rights were not setup correct.
ASKER