asked on

Admin can't access network share.

Hello I'm in the middle of running SCAP scans on our systems, currently in a closed loop enviroment trying to get all system compliant. Had to remove myself from Domain Admins group, created a new Security Group "Local Admins" placed this group in the Builtin Administrators group. FIrst issue I created a new Policy to add this newly created SG into local admin group on all machines, following the instruction from the following article - https://community.spiceworks.com/how_to/907-gpo-to-push-out-local-administrators-across-a-domain I've waiting 3 hours, rebooted serveral times, ran gpupdate serveral times can't get this group to add to admin group. Second issue one of our shares sitting on server 2016 I cannot access, "Access Denied". I've added the newly created SG with Full Conrtol as well as my account to top leverl and granted full control no access.

Thanks.

srinivasan Thiagarajan

For 1st issue.
* Can you please pull the GPresult.html file and verify the status newly created GPO.
* Get the logon server name " Echo %logonserver%
* Please check the respective GPO file is updated on the logon server's Sysvol folder.

srinivasan Thiagarajan

For 2nd issue:-
* Please check the effective share and security permission applied for the specific Admin account.

ManieyaK_

ASKER

ran gpresult /h C:gpresult.html result = access denied. this was with my domain admin account on DC

J0rtIT

ran gpresult /h "C:\gpresult.html"
Make sure to run the Powershell Console As an Administrator.

Now Double check the permissions on the Server that contains the Share.
For example, the share is : \\<server>\<share>
then RDP to the Server, open cmd and run
Net share
Take where is the Physical path on disk of the share.
Navigate to there using Explorer on windows.
right click the folder, and check "Share" permissions and "Security Permissions"
the most important ones are the Security permissions make sure your admin is in there or at least in a group where he is a member of.

Jose

ManieyaK_

ASKER

Ran Net Share none of the network drives are shown, but the one is the only one i cant access. My account is added to the admin group individually & a SG with admin rights.

ASKER CERTIFIED SOLUTION

J0rtIT

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

ManieyaK_

ASKER

Thanks Guys.