Networking Forums

Networking Forums > Computer Networking > Windows Networking > Server 2008 file share vs local admin grp

Reply
Thread Tools Display Modes

Server 2008 file share vs local admin grp

 
 
Masl
Guest
Posts: n/a

 
      01-28-2009, 08:01 AM
Hello,

I set up a file share (server 2008 x64) and try to access it from the local
host as local admin (<--full access), a window pops up telling me:
"You don't currently have permission to access this folder" - click continue
to get access to this folder....
If I now click continue, the systems modifies the ACL by adding my user
object with read & execute right - although I'm already member of the local
admin grp.

Share permissions: local admins, full control
Security: local admins, full control
(aside from several other rights/permissions but no explicit deny set)

Any idea what has chanced in server 2008?
thanks in advance
br




 
Reply With Quote
 
 
 
 
Meinolf Weber [MVP-DS]
Guest
Posts: n/a

 
      01-28-2009, 12:08 PM
Hello Masl,

The change is UAC. Any administrative account except the administrator is
using it.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hello,
>
> I set up a file share (server 2008 x64) and try to access it from the
> local
> host as local admin (<--full access), a window pops up telling me:
> "You don't currently have permission to access this folder" - click
> continue
> to get access to this folder....
> If I now click continue, the systems modifies the ACL by adding my
> user
> object with read & execute right - although I'm already member of the
> local
> admin grp.
> Share permissions: local admins, full control
> Security: local admins, full control
> (aside from several other rights/permissions but no explicit deny set)
> Any idea what has chanced in server 2008?
> thanks in advance
> b



 
Reply With Quote
 
Masl
Guest
Posts: n/a

 
      01-30-2009, 07:41 AM
Thx a lot for your answer.
At the moment it seems that disabling UAC is the only known solution for
this problem.

If anyone knows best practices on how to deal with this challenge, I would
appreciate your reply.

Thanks in advance
br


"Meinolf Weber [MVP-DS]" wrote:

> Hello Masl,
>
> The change is UAC. Any administrative account except the administrator is
> using it.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > Hello,
> >
> > I set up a file share (server 2008 x64) and try to access it from the
> > local
> > host as local admin (<--full access), a window pops up telling me:
> > "You don't currently have permission to access this folder" - click
> > continue
> > to get access to this folder....
> > If I now click continue, the systems modifies the ACL by adding my
> > user
> > object with read & execute right - although I'm already member of the
> > local
> > admin grp.
> > Share permissions: local admins, full control
> > Security: local admins, full control
> > (aside from several other rights/permissions but no explicit deny set)
> > Any idea what has chanced in server 2008?
> > thanks in advance
> > br

>
>
>

 
Reply With Quote
 
Meinolf Weber [MVP-DS]
Guest
Posts: n/a

 
      01-30-2009, 08:26 AM
Hello Masl,

You can configure a GPO, but that test first on a lab system.

Computer configuration, windows settings, security settings, local policies,
security options, "User account control: Behavior of the elevation prompt
for administrators in Admin Approval Mode", choose "Elevate without prompting".

In my opinion you should NOT use that policy. It lowers the security tremendous.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Thx a lot for your answer.
> At the moment it seems that disabling UAC is the only known solution
> for
> this problem.
> If anyone knows best practices on how to deal with this challenge, I
> would appreciate your reply.
>
> Thanks in advance
> br
> "Meinolf Weber [MVP-DS]" wrote:
>
>> Hello Masl,
>>
>> The change is UAC. Any administrative account except the
>> administrator is using it.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers
>> no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> Hello,
>>>
>>> I set up a file share (server 2008 x64) and try to access it from
>>> the
>>> local
>>> host as local admin (<--full access), a window pops up telling me:
>>> "You don't currently have permission to access this folder" - click
>>> continue
>>> to get access to this folder....
>>> If I now click continue, the systems modifies the ACL by adding my
>>> user
>>> object with read & execute right - although I'm already member of
>>> the
>>> local
>>> admin grp.
>>> Share permissions: local admins, full control
>>> Security: local admins, full control
>>> (aside from several other rights/permissions but no explicit deny
>>> set)
>>> Any idea what has chanced in server 2008?
>>> thanks in advance
>>> b



 
Reply With Quote
 
 
 
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Windows Server 2008 - Printer Share for MacOS Martin Weil Windows Networking 0 09-29-2010 02:29 PM
Server 2008 R2 file share access fails under heavy load PaulChavez Windows Networking 3 10-31-2009 11:33 PM
Printing to local XP machine from program on Server 2008 terpsfan08 Windows Networking 17 11-06-2008 11:56 AM
Network Service on Windows Server 2008 cannot mount a share steve.nickels@gmail.com Windows Networking 0 10-01-2008 04:50 PM
reset admin local password trought gpo on server 2003 sebastien_akeo Windows Networking 2 07-20-2007 12:22 PM



1 2 3 4 5 6 7 8 9 10 11