Server 2016 security/users

I just built out first 2016 server for testing.  When I try to make changes to the desktop or folders, I get denied.   I checked the permissions on the Windows folder and couldn't figure out how to add Domain Admins to security.   I'm logged in a domain\Administrator
It only has the Administrators from the local server.  e.g. Test2106/Administrators.

How do you fix this?
J.R. SitmanIT DirectorAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Cliff GaliherCommented:
2016 hasn't really changed the permission or NTFS model of previous versions. The security enhancements touted are in under the covers hardening. Preventing apps from doing things they shouldn't.

So what *specifically* are you trying to do? Anything a domain admin doesnt have permissions to do probably shouldn't be done.
0
J.R. SitmanIT DirectorAuthor Commented:
I noticed it because I was trying to change the desktop Theme.   Domain Admin is not in the security settings.  However, if I log on with my user name it works fine.
0
Cliff GaliherCommented:
Through the GUI or are you manipulating files?
0
IT Pros Agree: AI and Machine Learning Key

We’d all like to think our company’s data is well protected, but when you ask IT professionals they admit the data probably is not as safe as it could be.

LEARN MORE
J.R. SitmanIT DirectorAuthor Commented:
I guess I'm not being clear.   When I log on as Administrator, there no security permissions and I can't edit them.  The user Administrator is a member of Domain Users.   If I log on as me, I have security permissions and I can add to the security.  e.g. I can add Domain Admins to the permissions.   I'm also a member of Domain Admins.
0
Cliff GaliherCommented:
My point is why are you manipulating those files at all. Changing the theme is done through the GUI, and is a per-user setting at that. So what you describe simply doesnt add up.
0
J.R. SitmanIT DirectorAuthor Commented:
you're focusing on the wrong issue.   See the attached.   On a new 2008 R2 server, logged on as Administrator the "add" button is available.  On the 2016 server it is not.

permissions
0
Cliff GaliherCommented:
*sigh* never mind. You are choosing nit to read or understand. Good luck. "m out.
0
MaheshArchitectCommented:
This is not windows server 2016 issue, NTFS permission model is not changed

2016 server We are using 2016 DC and member server both and I did not face this issue ever

You can try one thing:
Add server to domain 1st if you want to domain admins on ACL
If its already done, open lusrmgr.msc on server and from administrators group try to add domain admins, if domain admins is not already added
You must be having some issue with either installation or there must be some issue with domain joining, you may try disabling UAC from gpedit.msc

probably the account through which you trying to add permissions is not member of local administrators group on server, in that case its highly possible that "add" button is grade out
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
J.R. SitmanIT DirectorAuthor Commented:
you were correct.   The user I was logging on as was not part of the Domain Admins group.   Somehow the group got removed from the account.  

Thanks
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2016

From novice to tech pro — start learning today.