Avatar of J.R. Sitman
J.R. Sitman
Flag for United States of America asked on

Server 2016 security/users

I just built out first 2016 server for testing.  When I try to make changes to the desktop or folders, I get denied.   I checked the permissions on the Windows folder and couldn't figure out how to add Domain Admins to security.   I'm logged in a domain\Administrator
It only has the Administrators from the local server.  e.g. Test2106/Administrators.

How do you fix this?
Active DirectoryWindows 10AzureWindows Server 2016

Avatar of undefined
Last Comment
J.R. Sitman

8/22/2022 - Mon
Cliff Galiher

2016 hasn't really changed the permission or NTFS model of previous versions. The security enhancements touted are in under the covers hardening. Preventing apps from doing things they shouldn't.

So what *specifically* are you trying to do? Anything a domain admin doesnt have permissions to do probably shouldn't be done.
J.R. Sitman

ASKER
I noticed it because I was trying to change the desktop Theme.   Domain Admin is not in the security settings.  However, if I log on with my user name it works fine.
Cliff Galiher

Through the GUI or are you manipulating files?
Experts Exchange is like having an extremely knowledgeable team sitting and waiting for your call. Couldn't do my job half as well as I do without it!
James Murphy
J.R. Sitman

ASKER
I guess I'm not being clear.   When I log on as Administrator, there no security permissions and I can't edit them.  The user Administrator is a member of Domain Users.   If I log on as me, I have security permissions and I can add to the security.  e.g. I can add Domain Admins to the permissions.   I'm also a member of Domain Admins.
Cliff Galiher

My point is why are you manipulating those files at all. Changing the theme is done through the GUI, and is a per-user setting at that. So what you describe simply doesnt add up.
J.R. Sitman

ASKER
you're focusing on the wrong issue.   See the attached.   On a new 2008 R2 server, logged on as Administrator the "add" button is available.  On the 2016 server it is not.

permissions
⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.
Cliff Galiher

*sigh* never mind. You are choosing nit to read or understand. Good luck. "m out.
ASKER CERTIFIED SOLUTION
Mahesh

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
J.R. Sitman

ASKER
you were correct.   The user I was logging on as was not part of the Domain Admins group.   Somehow the group got removed from the account.  

Thanks